Burner F Systems DOC V2 2 en

Burner Technology for
S7 F Systems
(Burner Library)
Siemens
SIMATIC S7 F Systems V6.2 Industry
Online
https://support.industry.siemens.com/cs/ww/en/view/109751614 Support
Warranty and liability
Warranty and liability
Note The Application Examples are not binding and do not claim to be complete
regarding the circuits shown, equipping and any eventuality. The Application
Examples do not represent customer-specific solutions. They are only intended
to provide support for typical applications. You are responsible for ensuring that
the described products are used correctly. These Application Examples do not
relieve you of the responsibility to use safe practices in application, installation,
operation and maintenance. When using these Application Examples, you
recognize that we cannot be made liable for any damage/claims beyond the
liability clause described. We reserve the right to make changes to these
Application Examples at any time without prior notice.
If there are any deviations between the recommendations provided in these
Application Examples and other Siemens publications – e.g. Catalogs – the
contents of the other documents have priority.
We do not accept any liability for the information contained in this document.
Any claims against us – based on whatever legal reason – resulting from the use of
the examples, information, programs, engineering and performance data etc.,
described in this Application Example shall be excluded. Such an exclusion shall
not apply in the case of mandatory liability, e.g. under the German Product Liability
Act (“Produkthaftungsgesetz”), in case of intent, gross negligence, or injury of life,
body or health, guarantee for the quality of a product, fraudulent concealment of a
 Siemens AG 2018 All rights reserved
deficiency or breach of a condition which goes to the root of the contract

(“wesentliche Vertragspflichten”). The damages for a breach of a substantial
contractual obligation are, however, limited to the foreseeable damage, typical for
the type of contract, except in the event of intent or gross negligence or injury to
life, body or health. The above provisions do not imply a change of the burden of
proof to your detriment.
Any form of duplication or distribution of these Application Examples or excerpts
hereof is prohibited without the expressed consent of the Siemens AG.
Security Siemens provides products and solutions with industrial security functions that
informa- support the secure operation of plants, systems, machines and networks.
tion In order to protect plants, systems, machines and networks against cyber
threats, it is necessary to implement – and continuously maintain – a holistic,
state-of-the-art industrial security concept. Siemens’ products and solutions only
form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems,
machines and networks. Systems, machines and components should only be
connected to the enterprise network or the internet if and to the extent necessary
and with appropriate security measures (e.g. use of firewalls and network
segmentation) in place.
Additionally, Siemens’ guidance on appropriate security measures should be
taken into account. For more information about industrial security, please visit
http://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them
more secure. Siemens strongly recommends to apply product updates as soon
as available and to always use the latest product versions. Use of product
versions that are no longer supported, and failure to apply latest updates may
increase customer’s exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial
Security RSS Feed under http://www.siemens.com/industrialsecurity.
Burner Technology for S7 F Systems (Burner Library)

Entry-ID: 109751614, V2.2, 12/2018 2
Table of contents
Table of contents
Warranty and liability ................................................................................................... 2
1 Burner Technology and Burner Library .......................................................... 5
1.1 Library overview ................................................................................... 5
1.2 Technological layout ............................................................................. 5
Generic operation sequence of a burner.............................................. 8
2 System and Software Requirements ............................................................... 9
2.1 General information .............................................................................. 9
2.2 Standard Specification ......................................................................... 9
2.3 System & Hardware ........................................................................... 10
2.4 Software ............................................................................................. 10
3 Functions for Burner Technology .................................................................. 11
3.1 Function for controlling the air dampers (F_AIRD) ............................ 12
3.1.1 Introduction ......................................................................................... 12
3.1.2 Connections ....................................................................................... 13
3.1.3 Mode of operation .............................................................................. 15
3.1.4 Time diagrams .................................................................................... 16
3.1.5 Status graph ....................................................................................... 18
3.2 Function for controlling the functions of a bas burner
(F_GAS_BU) ...................................................................................... 21
3.2.1 Introduction ......................................................................................... 21
3.2.2 Connections ....................................................................................... 22

3.2.4 Timing diagram ................................................................................... 25
3.2.5 Status graph ....................................................................................... 27
3.3 Function for controlling the ignition of the burner (F_IGNTR) ............ 30
3.3.1 Introduction ......................................................................................... 30
3.3.2 Connections ....................................................................................... 31
3.3.4 Time diagrams .................................................................................... 34
3.3.5 Status graph ....................................................................................... 38
3.4 Function for controlling the functions of an oil burner
(F_OIL_BU) ........................................................................................ 41
3.4.1 Introduction ......................................................................................... 41
3.4.2 Connections ....................................................................................... 42
3.4.4 Time diagrams .................................................................................... 46
3.4.5 Status graph ....................................................................................... 50
3.5 Function for cleaning the oil burner (F_OIL_CLEAN) ........................ 55
3.5.1 Introduction ......................................................................................... 55
3.5.2 Connections ....................................................................................... 57
3.5.4 Timing diagram ................................................................................... 60
3.5.5 Status graph ....................................................................................... 62
3.6 Function for position monitoring (F_POS_CH)................................... 65
3.6.1 Introduction ......................................................................................... 65
3.6.2 Connections ....................................................................................... 67
3.6.4 Timing diagram ................................................................................... 70
3.6.5 Status graph ....................................................................................... 71
3.6.6 Calculation example for MAXDIF f(REF_POS1, λmin) ........................ 73
3.7 Function for gas tightness test (F_TIGHTN) ...................................... 74
3.7.1 Introduction ......................................................................................... 74
3.7.2 Connections ....................................................................................... 75

Entry-ID: 109751614, V2.2, 12/2018 3
Table of contents

Function principle of the gas tightness test ........................................ 77
Function principle F_TIGHTN ............................................................ 78
3.7.4 Time diagrams .................................................................................... 79
3.7.5 Status graph ....................................................................................... 80
4 Interaction of the Blocks ................................................................................. 82
4.1 Overview............................................................................................. 82
4.2 Interconnection example F_GAS_BU ................................................ 83
4.2.1 Explanations on interconnection example F_GAS_BU ...................... 84
4.3 Interconnection example F_OIL_BU .................................................. 85
4.3.1 Explanation of interconnection example F_OIL_BU .......................... 86
5 Migration ........................................................................................................... 88
6 Appendix .......................................................................................................... 92
6.1 Specific Abbreviations in CFC Code .................................................. 92
6.2 Service and Support ........................................................................... 93
6.3 Links and Literature ............................................................................ 94
6.4 Change documentation ...................................................................... 94

Entry-ID: 109751614, V2.2, 12/2018 4
1 Burner Technology and Burner Library

This chapter provides a generic view of the safety functions used in a gas or oil
burner.
The function example follows the guidelines of EN 746-2. The safety requirements
are divided into individual implemented functions, which have each been
programmed independently.
1.1 Library overview

What will you get?
The document on hand describes a library which contains code with uniquely
defined interfaces. The functionality generally corresponds to the functionality of a
burner control, if all parts of the library are used.
All of the library parts are described individually. Due to the complexity, a step-by-
step instruction for integrating of the library is not provided. Instead, there is an
interconnection example describing the most important interactions between the
individual parts of the library.
Copyright  Siemens AG 2018 All rights reserved
Using the functions contained in this example is no guarantee for meeting

the legal requirements.
1.2 Technological layout

The technological layout displayed on the page below shows a simplified
configuration of a furnace as well as the relevant components for controlling the
burner.

Entry-ID: 109751614, V2.2, 12/2018 5
Figure 1-1 Technological layout

Table 1-1 Abbreviations used in the graphic

Name Meaning
IGV1 Igniter gas valve 1
IGV2 Igniter gas valve 2
OIL_SSOV1 Oil safety shut off valve 1
OIL_SSOV2 Oil safety shut off valve 2
GAS_SSOV1 Gas safety shut off valve 1
GAS_SSOV2 Gas safety shut off valve 2
PI+ Pressure indicator, upper limit
PI- Pressure indicator, lower limit
VV Venting valve
VENT Venting
IGN_TRAFO Ignition transformator
FD Flame detector
SD Actuators
PS Pressure sensor
SOV Shut off valve
PFD Pilot flame detector

Entry-ID: 109751614, V2.2, 12/2018 6
General structure of a combustion plant

• Feed line to the bas burner with two safety shut-off valves
– contains pressure switches and venting valves for performing the gas
tightness test
• Feed line to the oil burner with two safety shut-off valves
• Feed line to igniter (pilot) with one manual shut-off valve and two safety
shut-off valves
• Fresh air supply with fan
• Burnt gas exhaust with shut-off damper
• Ignition transformer to light the ignition flame
• Flame detectors for monitoring the ignition flame
• Main flame detector for monitoring the ignition flame
• Drive for regulating the gas or fuel/air mixture ratio

Entry-ID: 109751614, V2.2, 12/2018 7
Generic operation sequence of a burner

Before igniting the burner, depending on the application (from 1200 kW burner
capacity according to EN 746-2), a tightness test of the safety shut-off valves in the
gas supply has to be carried out.
Prior to starting the gas or oil burner, the combustion chamber and burnt gas
exhausts must be cleaned of any combustible products. This pre-purge is
performed by means of combustion air.
The time required for this pre-ventilation depends on the type of burner and is
calculated based on the EN 746-2,EN 676 or EN 267 specifications. Pressure and
mass/volume flow during the pre-purge, must be continuously monitored to ensure
that the pressure and mass/volume flow does not fall below the minimum value
while purging.
The ignition of the first burner must be initiated immediately after the pre-ventilation
has been completed. The ignition fuel supply valves are opened and the streaming
gas is ignited by means of the ignition transformer.
Within a safety time defined in the standards, a pilot flame has to be detected by
the igniton flame detector. If, in addition, the safety conditions for starting up are
fulfilled (e.g. gas/oil and air conditions fulfilled), the safety shut-off valves can be
opened. Otherwise, the ignition process must be aborted.
The main burner must ignite within the safety time for the main ignition also defined
by the EN 746-2; otherwise, a failure shutdown must be initiated (immediate

closing of the safety shut-off valves with ventilation).
During startup and burner operation, the safety conditions relevant in the
respective application must be monitored. The safety conditions result from a
performed risk assessment conducted with the assistance of the relevant
standards (e.g. EN 746-2, EN 12952, EN 12953, etc.). If the required safety
conditions are not met at a certain point in time, the fuel supply is not opened, or it
is interrupted (fault shutdown).
An automatic restart is not allowed after an error shutdown. The error must be
acknowledged manually and the start-up process then initiated anew.
The fuel and air flow are regulated via the air damper or fuel control valves. If the
main flame detector indicates a presence of the flame, the flow rate of the fuel
quantity can be increased, depending on the required heating energy. The
increase or decrease shall be in the form of a monitored fuel ratio. It is important to
ensure that at no time a dangerous air deficiency exists. For example, a lack of air
can arise when the gas control valve opens faster than the air damper, upon an
increase of power. For this reason, the EN 12067-2 requires that with an increase
of power the air damper must open first and afterwards the gas control valve. In
chapter 4 you are given an example for the interconnections between the different
functions.

Entry-ID: 109751614, V2.2, 12/2018 8
2 System and Software Requirements

2.1 General information
The functions described in the following chapters can be used in conjunction with
the Fail Safe automation system SIMATIC for control of gas and oil burners. With
proper connection of the function blocks (see chapter 4) and using the appropriate
peripherals (see chapter 2.3) a Safety class up to SIL3 according to IEC
61508:2010 can be achieved. The functions of the library have been developed in
regard to individual subfunctions in order to ensure a modular application when
controlling multiple burners. The functionality of a burner control is available when
using all parts of the library. The library contains safety function blocks that
represent the basic functions and the safety aspect of a burner management
system (see chapters 3). The complete automation of the burner (e.g. control of the
fuel supply / quality control / temperature control) must be implemented by the
user.
2.2 Standard Specification

The functions of the burner library have been developed under consideration of the
following standards:
• EN 746-2:2010
• EN 12067-2:2004
• EN 267:2011
• EN 676:2008
• EN 298:2012
• EN 1643:2014
• EN 12952-8:2002
• EN 12953-7:2002
• ISO 13577-2:2014
• ISO 13577-4:2014
• NFPA 85:2015
• NFPA 86:2011
• IEC 61508:2010
The above standards may be fulfilled through proper interconnection of the function
(for examples see chapter 4). The user is responsible for correct logic
interconnection of these signals, so that every unsafe state detected by the library
blocks will result in an appropriate reaction or safety shutdown of the burner.
For correct function of the function blocks, it is necessary that the safety program is
called in a cyclic interrupt OB (e.g. in OB35 of a S7-400F/FH), which has a defined
call interval.The specific configuration of the times and limits depend on the
equirements of the user performed risk assessment and the specifications in the
standards / guidelines for each plant at which the blocks are to be used. The user
is responsible for a correct implementation of the risk assessment and the
corresponding configuration of times.
In General, the safety relevant times must not be exceeded. However, the
indicated safety times should be considered as nominal values, which underlie the
execution times of the cyclic calls in the PLC. Therefore, there is a permissible

Entry-ID: 109751614, V2.2, 12/2018 9
tolerance in the configured safety times of ± 2 cycles. A final functional test of the
system in accordance with the directive(s) has to be performed by the user.
2.3 System & Hardware

The functions contained in this example can run on Siemens SIMATIC S7-400F/FH
systems in combination with fail-safe signal modules.
In addition, the following components are required to meet the standards’
requirements:
• Safety valves (SSV) that comply with the following standards (EN161, EN 263)
• Control valves that comply with the corresponding standard
• F-DO module to control the (Ignite-) SSV and the ignition transformer
(controlled by DC 24V / 2A, respectively over safety relays for 110/230V AC )
• F-DI module for reading the flame detector and fail-safe signals (e.g. position
sensors of the air damper)
• F-AI module for monitoring values (temperature, pressure, etc.)
• DI module for reading mirror contacts or position feedback (e.g. the SSV)
• Ignition transformer which fulfill the process
• Flame detector including flame probe which are certified and fulfill the
requirements
• Sensors and actuators which fulfill the requirements
The connection of the sensors / actuators with the above mentioned modules is to
implement according to the respective manuals.
2.4 Software
The following Siemens SIMATIC software must be installed when using the
functions contained in this example:
• SIMATIC S7 F Systems V6.2 or higher

• SIMATIC S7 F Systems Library V1.3 + SP2
• CFC V9.0 SP1
• STEP 7 V5.6

Entry-ID: 109751614, V2.2, 12/2018 10
3 Functions for Burner Technology

The following functionalities can be fulfilled with the existing library:
Table 3-1
Name Function Remark
F_TIGHTN Function for controlling the This function provides the leak test for the safety shut-off
gas tightness test valves in the gas supply
F_GAS_BU Function for controlling a
bas burner
F_OIL_BU Function for controlling an
oil burner
F_IGNTR Function for controlling the The ignition process is controlled with function F_IGNTR
ignition of the burner and F_GAS_BU (for gas burners) or F_IGNTR and
F_OIL_BU (for oil burners) respectively.
They check ignition conditions, monitor the safety time for
the ignition, and control the ignition transformer as well as
the ignition gas valves and safety shut-off valves.
If the safety conditions for startup or burner operation are
not met, the fuel supply is not enabled or interrupted by
function F_GAS_BU or F_OIL_BU.
F_AIRD Function for controlling the This function controls the position of the air dampers
air dampers during ignition and operation.
Discrete feedback values, i.e. from position sensors, are
required for this function.
F_OIL_CLEAN Function for cleaning the This function enables cleaning oil burners.
oil burner A performed cleaning influences the duration of the
monitoring time for an ignition in the F_OIL_BU function.
F_POS_CH Function for position This function monitors the position of the actuators for air
monitoring and fuel.
The function was developed for analog actuators.
Using the functions contained in this example is no guarantee for meeting

the legal requirements.

Entry-ID: 109751614, V2.2, 12/2018 11
3.1 Function for controlling the air dampers (F_AIRD)

3.1.1 Introduction
The fail-safe function F_AIRD for controlling the air damper handles the air damper
control by means of feedback messages from position sensors.
This control function can be used to open or close air dampers completely or to
move the air dampers into ignition position.
Figure 3-1
CIC_F_AIRD
The picture above shows the chart-in-chart view of F_AIRD as it is available in the
library with the invisible feedbacks. To guarantee the complete functionality, you
need to interconnect:
• OPENING_ERROR with OPENING_ERROR_IN
• CLOSING_ERROR with CLOSING_ERROR_IN
Note When using this function, the following blocks must exist in the block folder:
• F_AND4 (FB 301)
• F_OR4 (FB 302)
• F_NOT (FB 304)
• F_LIM_TI (FB 345)
• F_SR_FF (FB 308)
• F_RS_FF (FB 307)
• F_TON (FB 343)
• F_TOF (FB 344)
• F_R_TRIG (FB 346)

Entry-ID: 109751614, V2.2, 12/2018 12
3.1.2 Connections
All data type F-BOOL inputs have a default 0-signal.

All data type F-TIME inputs have T#0ms pre-assigned.
Table 3-2
Name Data type Description
Inputs
CLOSE_AD F-BOOL Air damper closing command
• 1-signal = Command for closing the air damper has been
given
• 0-signal = A command for opening the air damper can be
given via OPEN_AD.
When AD_IGNPOS is set, commands to CLOSE_AD are ignored.
AD_IGNPOS F-BOOL Move air damper to ignition position
• 1-signal = Command for moving to ignition position has been
given
• 0-signal = A command for opening or closing the air
damper can be given via OPEN_AD or CLOSE_AD.
If AD_IGNPOS has been set, commands to CLOSE_AD and

OPEN_AD are ignored.
OPEN_AD F-BOOL Air damper opening command
• 1-signal = Command for opening the air damper has been
given
• 0-signal = A command for closing the air damper can be
given via CLOSE_AD.
When AD_IGNPOS is set, commands to CLOSE_AD are ignored.
AD_CLOSED F-BOOL Air damper closed
– 1-signal = Feedback that the air damper has been closed.
– 0-signal = Feedback that the air damper has not closed
completely.
AD_OPENED F-BOOL Air damper open
• 1-signal = Feedback that the air damper is open.
• 0-signal = Feedback that the air damper has not opened
completely.
AD_MAX F-BOOL Air damper in ignition position <MAX
• 1-signal = Feedback that the air damper is below or on the
maximal ignition position.
• 0-signal = Feedback that the air damper is above the
maximal ignition position.
AD_MIN F-BOOL Air damper in ignition position >MIN
• 1-signal = Feedback that the air damper is above or on the
minimal ignition position.
• 0-signal = Feedback that the air damper is below the minimal
ignition position.
QUIT F-BOOL Acknowledgement error
• Error messages are reset with this input parameter.
• The acknowledgement is only given at positive edge.

Entry-ID: 109751614, V2.2, 12/2018 13

T1_CLOSE F-TIME Time to close air damper
• Within this time, the air damper must have been closed;
otherwise, an error signal will be pending at output
CLOSING_ERROR.
• Guide value: 0min < T1_CLOSE < 10min
T2_OPEN F-TIME Time to open the air damper
• Within this time, the air damper must have been opened;
otherwise, an error signal will be pending at output
OPENING_ERROR.
• Guide value: 0min < T2_OPEN < 10min
CLOSING_ERROR F-BOOL CLOSING_ERROR must be wired to this feedback input
_IN
OPENING_ERROR F-BOOL OPENING_ERROR must be wired to this feedback input
_IN
Outputs
CLOSE_1 F-BOOL Air damper closing command
• 1-signal = Close air damper until feedback is given
• 0-signal = Do not close the air damper
This output is set if:
AD_IGNPOS=0, OPEN_AD=0 and CLOSE_AD=1.

AD_IGNPOS=1 and AD_MAX=0 and AD_MIN=1
CLOSE_2 F-BOOL Air damper closing command
• 1-signal = Close air damper independent of the feedback
• 0-signal = Do not close the air damper
OPEN_1 F-BOOL Air damper opening command
• 1-signal = Open air damper until feedback is given
• 0-signal = Do not open the air damper
AD_IGNPOS=1 and AD_MAX=1 and AD_MIN=0
OPEN_2 F-BOOL Air damper opening command
• 1-signal = Open air damper independent of the feedback
• 0-signal = Do not open the air damper
CLOSING_ ERROR F-BOOL Air damper closing error
• 1-signal = Error when closing the air damper
• 0-signal = There is no error.
OPENING_ ERROR F-BOOL Air damper opened error
• 1-signal = Error when opening the air damper.
POS_ERROR F-BOOL AD_MIN/ AD_MAX or AD_OPENED/ AD_CLOSED error
• 1-signal = Plausibility error in the feedback.
QUIT_ON F-BOOL Acknowledgement pending
• 1-signal: a 1-signal is pending at the QUIT input.

Entry-ID: 109751614, V2.2, 12/2018 14

AD_IGNPOS_OK F-BOOL Ignition position reached
• Air damper is located on a position between AD_MIN and
AD_MAX.
• A 1-signal is pending at the AD_IGN_POS input.
NOTICE Please note that the configured safety times must comply with the
corresponding standards.
3.1.3 Mode of operation
A response of input OPEN_AD or CLOSE_AD initiates opening or closing the air

dampers.
Outputs OPEN_1 and OPEN_2 or CLOSE_1 and CLOSE_2 supply a 1-signal for
controlling the actuators.
The inputs are switch-on interlocked, i.e. if a 1-signal is pending on either side,
there will be no reaction at the outputs.
The opening command remains pending until a feedback is given, which is
detected via input AD_OPENED=1 or AD_CLOSED=1. The feedback must be

given within the configured time T2_OPEN or T1_CLOSE.
If the feedback is given on time, outputs OPEN_1 or CLOSE_1 are reset. Outputs
OPEN_2 and CLOSE_2 remain set until the appropriate input (OPEN_AD or
CLOSE_AD) is pending.
If not opening or closing within the configured time, an error message is output at
output OPENING_ERROR or CLOSING_ERROR, which indicates an error at the
air dampers.
A pending error is reset with a positive edge at input QUIT.

Error message POS_ERROR is pending if a 1-signal is active at AD_OPENED and
AD_CLOSED simultaneously. Acknowledgement is required for this message.
However, the error message is only output if no command is pending for starting up
the ignition position via the AD_IGNPOS input.
If this is the case, the inputs AD_OPENED and AD_CLOSED are not evaluated.
Instead, output OPEN_1 is set when the air damper has reached a position below
the defined maximum, but not above the defined minimum (AD_MAX=1 and
AD_MIN=0).
If the air damper is above the defined maximum and above the defined minimum
(AD_MAX=0 and AD_MIN=1), output CLOSE_1 is set.
Error message POS_ERROR is pending if a 1-signal is active at AD_IGNPOS and
simultaneously a 0-signal at AD_MIN and AD_MAX. Acknowledgement is also
required in this case.

Entry-ID: 109751614, V2.2, 12/2018 15
3.1.4 Time diagrams
Signal behavior
The picture below shows the signal behavior of function F_AIRD.
Figure 3-2
1) 2) 3) 4) 5)
CLOSE_AD Close air damper

AD_IGNPOS Drive air damper into ignition position
OPEN_AD Open air damper
AD_CLOSED Air damper closed
AD_MAX Air damper underneath the max. ignition pos
AD_MIN Air damper above the min. ignition position
AD_OPENED Air damper opened
QUIT Acknowledgement
CLOSE_1 Air damper closing command 1
OPEN_1 Air damper opening command 1

CLOSING_ERROR Error during closing
OPENING_ERROR Error during opening
POS_ERROR Error AD_MIN / AD_MAX
QUIT_ON Quit is active
AD_IGNPOS_OK Ignition position reached
T1_CLOSE T2_OPEN
Legend: Input = 1
Input irrelevant
Output = 1
Description of the signal behavior:

1) Air damper closing command (CLOSE_AD=1)
Air damper is closed (CLOSE_1=1, CLOSE_2=1)
Timer T1_CLOSE starts
2) Air damper closed, within T1_CLOSE,
Output CLOSE_1 is reset, CLOSE_2 remains set (until CLOSE_AD=0)
3) Air damper opening command (OPEN_AD=1)
Air damper is opened (OPEN_1=1, OPEN_2=1)
Timer T2_OPEN starts
4) Air damper open, within T2_OPEN,
Output OPEN_1 is reset, OPEN_2 remains set (until OPEN_AD=0)
5) Inputs CLOSE_AD and OPEN_AD are switch-on interlocked; applying a 1-signal to both
inputs does not yield any reaction

Entry-ID: 109751614, V2.2, 12/2018 16
Signal behavior for the ignition position of the air dampers

The picture below displays the signal behavior of function F_AIRD for an ignition
position of the air dampers.
Figure 3-3
1) 2) 3) 4) 5)
CLOSE_AD Close air damper

AD_IGNPOS Drive air damper into ignition position
OPEN_AD Open air damper
AD_CLOSED Air damper closed
AD_MAX Air damper underneath max. ignition position
AD_MIN Air damper above min. ignition position
AD_OPENED Air damper opened

CLOSING_ERROR Error during closing
OPENING_ERROR Error during opening
POS_ERROR Error AD_MIN / AD_MAX
QUIT_ON Quit is active
AD_IGNPOS_OK Ignition position reached
Legend: Input = 1
Input irrelevant
Output = 1
Description of the signal behavior for the ignition position of the air dampers
1) "Bring air damper in ignition position" command pending (AD_IGNPOS=1)
Air damper above the maximum (AD_MAX=0)
Air damper will be closed (CLOSE_1 = 1)
2) Air damper below the maximum (AD_MAX=1)
Air damper above the minimum (AD_MIN=1)
Air damper in ignition position (AD_IGNPOS_OK=1)
3) Air damper below the minimum (AD_MIN=0)
Air damper will be opened (OPEN_1 = 1)
4) Air damper below the maximum (AD_MAX=1)
Air damper above the minimum (AD_MIN=1)
Air damper in ignition position (AD_IGNPOS_OK=1)
5) "Air damper in ignition position" no longer pending (AD_IGNPOS=0)
AD_IGNPOS_OK=0

Entry-ID: 109751614, V2.2, 12/2018 17
3.1.5 Status graph

Figure 3-4
11
10
Set
air damper in 3 Close air
6
ignition damper
position
Open air
4 damper 7
5
8
2 Ignition 27d
27c
9 position 27b
1
27a
26
28e
Initital
19 12 condition 16
17
13 28b Error
20
Manual
opening of air Manual closing 28a
dampers of air dampers
25
24
14a
14b 18b
15 18a
22 23
Air damper Air damper 28c
opened closed
28d
21

Entry-ID: 109751614, V2.2, 12/2018 18
Explanation of the status graph

Table 3-3
Transition Transition conditions
1 OPEN_AD == 1 AND CLOSE_AD == 1
2 AD_IGNPOS == 1
3 AD_MAX == 0 AND AD_MIN == 1
4 AD_MIN == 0 AND AD_MAX == 1
5 AD_MAX == 1 AND AD_MIN == 1
6 AD_MIN == 0 OR AD_MAX == 0
7 AD_MAX == 1
8 AD_MIN == 1
9,10,11 AD_IGNPOS == 0
12 OPEN_AD == 1 AND AD_IGNPOS == 0
12,22 OPEN_AD == 0
14a AD_OPENED == 1
14b AD_OPENED == 0
15,19,20,21 AD_IGNPOS == 1
16 CLOSE_AD == 1 AND AD_IGNPOS == 0

17,23 CLOSE_AD == 0
18a AD_CLOSED == 1
18b AD_CLOSED == 0
24 T2_OPEN expired
25 T1_OPEN expired
26 QUIT == 1
27a-d AD_MIN == 0 AND AD_MAX == 0
28a-d AD_CLOSED == 1 AND AD_OPENED == 1

Entry-ID: 109751614, V2.2, 12/2018 19
Table 3-4
State Outputs which are switched
Set air damper to ignition position No outputs switched
Close air damper CLOSE_1:= TRUE
Open air damper OPEN_1:= TRUE
Ignition position reached AD_IGNPOS_OK := TRUE
Manual opening of air dampers OPEN_1 := TRUE
OPEN_2 :=TRUE
Timer T2_OPEN starts
Manual closing of air dampers CLOSE_1 := TRUE
CLOSE_2 :=TRUE
Timer T1_CLOSE starts
Air damper open OPEN_2 :=TRUE
OPEN_1 := FALSE
Air damper closed CLOSE_2 :=TRUE
CLOSE_1 := FALSE
out of 25 CLOSING_ERROR := TRUE
out of 24 OPENING_ERROR := TRUE
Error
out of 27 a-d POS_ERROR := TRUE
out of 28 a-e POS_ERROR := TRUE

Entry-ID: 109751614, V2.2, 12/2018 20
3.2 Function for controlling the functions of a bas burner

(F_GAS_BU)
3.2.1 Introduction
The failsafe function F_GAS_BU initiates starting a gas burner by controlling the
ignition function.
After successfully igniting the igniter, this function opens the safety shut-off valves
of the burner and checks whether an ignition has occurred within a defined time.
These functions are realized by the function in single-burner and multi-burner
mode.
Figure 3-5
CIC_F_GASBURNER
The picture above shows the chart-in-chart view of F_GAS_BU as it is available in
the library with the invisible feedbacks. To guarantee the complete functionality,
you need to interconnect
• ERROR_OP with ERROR_IN
• IGN_START with IGN_START_IN
• T_RUN_UP with T_RUN_UP_IN

Entry-ID: 109751614, V2.2, 12/2018 21
• F_AND4 (FB 301)
• F_OR4 (FB 302)
• F_NOT (FB 304)
• F_SR_FF (FB 308)
• F_RS_FF (FB 307)
• F_TON (FB 343)
• F_F_TRIG (FB 347)
3.2.2 Connections
All data type F-BOOL inputs, except for OP_INTL, have a default 0-signal.
Table 3-5
Inputs
PRE_INTL F-BOOL Switch on interlock
• If a 1-signal is active at this input, the gas burner function is
ready for operation.
After the burner has been started via GAS_BU_ON, this input is no
longer evaluated
ST_INTL F-BOOL Start-up interlock
• If a 1-signal is active at this input, the gas burner function can
be started.
This input is only evaluated during the startup process (starting with
GAS_BU_ON=1 to GAS_OPAT=1)
OP_INTL F-BOOL Operation interlock
• If a 1-signal is active at this input, the gas burner function can
be operated.
This input is only evaluated after the function is in operation
(GAS_OPAT=1)
GAS_BU_ON F-BOOL Start gas burner command
• A positive edge starts the burner function.
GAS_BU_OFF F-BOOL Stop gas burner command
• A positive edge terminates the operation of the burner.
V_IGNPOS F-BOOL Gas control valve in ignition position
• 1-signal: gas control valve in ignition position.
• 0-signal: gas control valve is not in ignition position.
GASFIRE F-BOOL Flame detected
• 1-signal: Flame detected
• 0-signal: no flame exists
If a flame has already been detected prior to the startup and other
burners are in operation, it is assumed, that other burners are
ignited and therefore an ignition position needs not be approached
for the fuel valves and air dampers.

Entry-ID: 109751614, V2.2, 12/2018 22

GAS_OK F-BOOL Gas criteria fulfilled
• 1-signal: gas criteria fulfilled
• 0-signal: gas criteria not fulfilled
Gas criteria are all fuel-related conditions necessary for a safe
operation
AD_IGNPOS F-BOOL Air damper in ignition position
• 1-signal: air damper in ignition position
• 0-signal: air damper not in ignition position
AIRFL_OK F-BOOL Joint air flow criteria fulfilled
• 1-signal: air criteria fulfilled
• 0-signal: Air criteria not fulfilled
Air criteria are all combustion air related conditions necessary for a
safe operation
IGN_OP F-BOOL Igniter in operation
• 1-signal: igniter successfully ignited
• 0-signal: igniter did not ignite
BU_OP F-BOOL Burner in operation
• 1-signal: other burners in operation
•
0-signal: other burners not in operation

If other burners are already in operation and a flame detected prior
to startup, it is assumed that other burners are ignited and therefore
an ignition position needs not be approached for fuel valves and air
dampers.
The acknowledgement is only given at positive edge
T_IGN F-TIME Gas burner safety time
• Within this time, the burner must have ignited successfully.
Guide value: 0min < T_IGN < 1min
T_MFSF TIME Monitoring time for the flame detector (Ambient light
test)
• An error is reported, if a flame is detected (GASFIRE = 1)
longer than the time T_MFS_FAIL , even though the gas burner
function is not operating (GAS_OPAT = 0) and the burner is not
in the high-temperature operation, or a combustion chamber
monitoring is in use (BU_OP = 1)
ING_START_IN F-BOOL ING_START must be wired to this feedback input
T_RUN_UP_IN F-BOOL T_RUN_UP must be wired to this feedback input
ERROR_IN F-BOOL ERROR must be wired to this feedback input
Outputs
GAS_RUN F-BOOL Gas startup program active
• 1-signal: gas startup program in operation
• 0-signal: gas startup program not started or conditions for the
start not fulfilled
IGN_ON F-BOOL Switch on the ignition function
• 1-signal: the ignition function is controlled
• 0-signal: the ignition function is not controlled

Entry-ID: 109751614, V2.2, 12/2018 23

OPEN_V F-BOOL Controlling the safety shut-off valves
• 1-signal: safety shut-off valves are opened
• 0-signal: safety shut-off valves are closed or remain closed
GAS_OPAT F-BOOL Gas burner in operation after T_IGN
• 1-signal: burner was ignited within the safety time
• 0-signal: burner not in operation
ERROR_OP F-BOOL Cancelled operation
• 1-signal: one or several errors exist, which have occurred
during operation
• 0-signal: no errors exist.
ERROR_IGN F-BOOL Flame missing after T_IGN has elapsed
• 1-signal: error detected, the fault counting is possible only by
evaluating this output. ERROR_OP will be set as well.
IGN_START F-BOOL Feedback output
T_RUN_UP F-BOOL Feedback output
The F_GAS_BU function is started by a positive edge at the GAS_BU_ON input.

However, the conditions of the switch-on interlock (PRE_INTL=1) and the startup-
interlock (ST_INTL=1) must be fulfilled.
If the burner is in single operation mode, it cannot be started while the main flame
detector reports a flame (GASFIRE=1). In multi-burner mode (BU_OP=1), the gas
startup program starts even if a flame has been detected.
If the burner is in single mode, the fuel control valves and the air dampers need to
be in ignition position (V_IGNPOS and AD_IGNPOS=1).
In both cases, the air and gas criteria (e.g. gas pressure valid) must be fulfilled
(AIRFL_OK=1 and GAS_OK=1) for controlling the ignition function.
If all these conditions apply, output GAS_RUN is set to "1" and a control of the
ignition function (output IGN_ON=1) follows.
If during the ignition process one or several conditions GAS_OK or AIRFL_OK (in
single burner mode additionally AD_IGNPOS and V_IGNPOS, in multi-burner
mode GASFIRE and BU_OP) are no longer fulfilled and then become active again,
a new start command must first be sent to GAS_BU_ON before GAS_RUN has a
1-signal again.
Upon the expiry of safety time T_IGN at the latest, a flame needs to be detected
via the GASFIRE input. Furthermore, a 1-signal must then be pending at the
OP_INTL (operation interlock) input at the latest. A successful ignition of the burner
is signaled via the GAS_OPAT output.

Entry-ID: 109751614, V2.2, 12/2018 24
During operation, the operation locks, air conditions and gas conditions must be
fulfilled and the flame exist. (i.e. a 1-signal must be active at inputs OP_INTL,
AIRFL_OK, GAS_OK and GASFIRE)
A fault shutdown is performed if a 0-signal is active at the input of the operation
interlock (OP_INTL), of the gas conditions (GAS_OK), the air conditions
(AIRFL_OK) or at the input of the main flame (GASFIRE). If this is the case, the
ERROR_OP output will be set. It must be reset with a positive edge at input QUIT
prior to the next start
The operation of the burner can be stopped at any time with a positive edge at the
GAS_BU_OFF input.
3.2.4 Timing diagram
The picture below shows the signal behavior of function F_GAS_BU.

Figure 3-6
Case 1: Case 2:
1) 2) 3) 4) 5) 6) 1) 2) 3) 4) 5) 6)
PRE_INTL Switch on interlock

ST_INTL Start up interlocking
OP_INTL Operation interlocking
GAS_BU_ON Start gas burner
GAS_BU_OFF Stop gas burner
V_IGNPOS Valves in igniter position
GASFIRE Flame detected
GAS_OK Gas criteria fulfilled
AD_IGNPOS Air damper in igniton position
AIRFL_OK Air crieteria fulfilled
IGN_OP Igniter in operation
BU_OP Other burner in operation
QUIT Acknowledgement ERROR_OP
GAS_RUN Gas start up program active
IGN_ON Igniter active
OPEN_V Activation of gas vlaves
GAS_OPAT Gas burner in operation after T_IGN
ERROR_OP Error oilburner
T_IGN T_IGN
Legend: Input = 1
Input irrelevant
Output = 1

Entry-ID: 109751614, V2.2, 12/2018 25
Case 1: Single-burner operation mode

1) Interlocking fulfilled (PRE_INTL=1)
Startup interlocking fulfilled (ST_INTL=1)
Fuel control valves in ignition position (V_IGNPOS=1)
Gas criteria fulfilled (GAS_OK=1)
Air dampers in ignition position (AD_IGNPOS=1)
Air criteria fulfilled (AIRFL_OK=1)
2) Starting the burner with positive edge at input GAS_BU_ON
Gas startup program running (GAS_RUN = 1)
Igniter controlled (IGN_ON=1)
3) Igniter in operation (IGN_OP=1)
Safety shut-off valves are opened (OPEN_V=1)
Safety time T_IGN is started
4) Within the safety time, the operating conditions are fulfilled(OP_INTL=1)
A flame is detected (GASFIRE=1)
5) Burner successfully ignited (GAS_OPAT=1)
6) Cancellation by stop command at input GAS_BU_OFF
Case 2: multi-burner operation mode

Several burners are operated in a combustion chamber; the first burner is ignited
by means of the preceding time diagram. “Flame detected” exists for all further
burners (GASFIRE=1). Inputs V_IGNPOS and AD_IGNPOS need not be pending
for these burners.

Flame was detected (GASFIRE=1)
Gas criteria fulfilled (GAS_OK=1)
Other burners are in operation (BU_OP=1)
2) Starting the burner with positive edge at input GAS_BU_ON
Gas startup program running (GAS_RUN = 1)
Igniter controlled (IGN_ON=1)
4) Within the safety time, all operation conditions are fulfilled
(OP_INTL=1)
Flame is detected (GASFIRE=1)
5) Burner successfully ignited (GAS_OPAT=1)
6) Cancellation by stop command at input GAS_BU_OFF

Entry-ID: 109751614, V2.2, 12/2018 26
3.2.5 Status graph

Figure 3-7
Help State
(state not
accessible)
Initial state
13
7 1
3b
8 3a Ready 14 10
9
Start-up Error
6
Error flame
detector
4
12
Open Safety 5b
shut-off valves
11
5a Burner in
operation

Entry-ID: 109751614, V2.2, 12/2018 27

Table 3-6
Transition Conditions for Transition
1 PRE_INTL == 1
2 PRE_INTL == 0
3a Single burner operation:
Rising edge at GAS_BU_ON AND
ST_INTL == 1 AND
GAS_BU_OFF == 0 AND
GAS_OK ==1 AND
AIRFL_OK == 1 AND
V_IGNPOS == 1 AND
AD_IGNPOS == 1
3b Multiple burner operation:
Rising edge at GAS_BU_ON AND
ST_INTL == 1 AND
GAS_BU_OFF == 0 AND
GAS_OK ==1 AND
AIRFL_OK == 1 AND
GASFIRE ==1 AND
BU_OP ==1
4 IGN_OP == 1
5a T_IGN elapsed AND GASFIRE == 1
5b T_IGN elapsed AND GASFIRE == 0
6 GAS_BU_OFF == 1
7 GAS_BU_OFF == 1 OR
GAS_OK == 0 OR
AIRFL_OK == 0 OR
ST_INTL == 0 OR
V_IGNPOS == 0 OR
AD_IGNPOS == 0 OR
(falling edge at BU_OP OR falling edge at GASFIRE)
8 GAS_OK == 0 OR
AIRFL_OK == 0 OR
ST_INTL == 0 OR
GAS_BU_OFF == 1 OR
IGN_OP == 0 OR
V_IGNPOS == 0 OR
AD_IGNPOS == 0 OR
(falling edge at BU_OP OR falling edge at GASFIRE)
9 GASFIRE == 1 AND BU_OP == 0
10 GASFIRE == 0 OR BU_OP == 1
11 OP_INTL == 0 OR GASFIRE == 0 OR
AIRFL_OK == 0 OR GAS_OK == 0
12 Monitoring time T_MFSF elapsed
13 QUIT == rising edge AND GASFIRE == 0
14 (GASFIRE == 0 OR BU_OP == 1 ) AND
PRE_INTL == 1

Entry-ID: 109751614, V2.2, 12/2018 28
Table 3-7
Initial state No outputs switched
Ready No outputs switched
Startup GAS_RUN := TRUE
IGN_ON := TRUE
Controlling the safety OPEN_V := TRUE
shut-off valves Safety time T_IGN is started
Gas burner in operation Safety time expired and no error has occurred
GAS_OPAT := TRUE
OP_INTL := TRUE
Error out of 10 ERROR_OP := TRUE
GAS_OPAT:= FALSE
OPEN_V := FALSE

Entry-ID: 109751614, V2.2, 12/2018 29
3.3 Function for controlling the ignition of the burner

(F_IGNTR)
3.3.1 Introduction
The control of the ignition of burners is realized with the failsafe function F_IGNTR.
It takes on the control of the valves for the infeed of the ignition fuel and the ignition
transformer which produces the ignition flame.
In the event of errors, the controlled components are turned fail-safe.
When the combustion plant is not in operation, it is possible to use the function to
perform a test of the ignition function.
Figure 3-8
CIC_F_IGNTR
The picture above shows the chart-in-chart view of F_IGNTR as it is available in
you need to interconnect:
• OPENV to OPEN_V_IN
• IGN_OPAT to IGN_OPAT_IN
• ERROR to ERROR_IN

Entry-ID: 109751614, V2.2, 12/2018 30
• F_AND4 (FB 301)
• F_OR4 (FB 302)
• F_NOT (FB 304)
• F_SR_FF (FB 308)
• F_RS_FF (FB 307)
• F_TON (FB 343)
• F_F_TRIG (FB 347)
3.3.2 Connections

Table 3-8

Inputs
IGN_ON F-BOOL “Switch on the ignition function” command
• The ignition function is switched on at this input with a 1-
signal, providing the main interlock is fulfilled
A possibly running ignition test is cancelled.
TEST_ON F-BOOL “Switch on the ignition test” command
• The ignition function is switched on at this input with a positive
edge, providing the main interlock is fulfilled and a 1-signal is
active at TEST_OFF.
TEST_OFF F-BOOL “Switch off the ignition test” command
The ignition test is terminated if a 0-signal is active at TEST_OFF.
The acknowledgement is only given at positive edge.
MAIN_INTL F-BOOL Main interlock fulfilled
• If a 1-signal is active at this input, the ignition function is ready
for operation.
Output IGN_READY will be set.
• Further conditions, which only become relevant at the time of
the actual ignition, must be interconnected to this input.
If a 1-signal is active at this input, the ignition function can be
started.
IGN_OP F-BOOL Ignition flame existing
Input from the ignition flame detector
• IGN_OP=0: no ignition flame existing
• IGN_OP=1: ignition flame existing

Entry-ID: 109751614, V2.2, 12/2018 31

PRG_RUN F-BOOL Other programs are running
As long as a 1-signal is pending here, other functions are in
operation, which prevent the ignition test from being switched on.
RUN_TFAIL F-BOOL Exceeded runtime
Input for runtime monitoring
• If a 1-signal is pending at this input, an ignition is no longer
possible.
An interlock can be realized via this input after several ignition
attempts.
As long as a 1-signal is pending here, other functions are in
operation, which prevent the ignition test from being switched on.
PFSF-MODE F-BOOL Stray Light Test / Pilot Flame Monitoring On / Off
• Plausibility check of the pilot flame: An error is detected If the
pilot flame is reported (IGN_OP = 1) longer than the time
T_PFS_FAIL, although the pilot burner is not in operation
(IGN_OPAT = 0)
• PFSF_MODE=0, Stray Light Test / Plausibility check is
activated
• PFSF_MODE=1, Stray Light Test / Plausibility check is de-
activated
If only one flame detector is used for monitoring the pilot burner
and main burner, the GAS_OPAT output of F_GAS_BU or
OIL_OPAT output of F_OIL_BU must be interconnected with this
input to avoid an unintentional error message
T1_IGN F-TIME Igniter safety time
Within this safety time, an ignition flame must be detected.
T2_TRANSF F-TIME Time for ignition transformer control pulse
Within this time, the ignition transformer is controlled.
T_PFSF F-TIME Monitoring Time for Stray Light Test / Pilot Flame
Detector
If a pilot flame is reported longer than the time T_PFS_FAIL
(IGN_OP = 1), although ignition is not in operation (IGN_OPAT =
0), an error is detected
OPEN_V_IN F-BOOL OPENING_V must be wired to this feedback input
IGN_OPAT_IN F-BOOL IGN_OPAT must be wired to this feedback input
Outputs
IGN_READY F-BOOL Ignition function ready for operation
Reports the ignition function ready for operation:
• 1-signal = Main interlock fulfilled and no error stored
• 0-signal = Ignition function not ready for operation.
IGN_TEST F-BOOL Ignition test in progress
• Reports the ignition test active
IGN_ENGD F-BOOL Controlling the igniter
• The ignition function is in operation
• Main interlock and operation interlock is fulfilled
• Ignition function or ignition test were started

Entry-ID: 109751614, V2.2, 12/2018 32

OPEN_V F-BOOL Controlling the ignition gas valves
• 1-signal: ignition gas valves are opened
• 0-signal: ignition gas valves are closed
TRANSF F-BOOL Controlling the ignition transformer
• 1-signal: ignition transformer is controlled
• 0-signal: ignition transformer stays off
IGN_OPAT F-BOOL Gas burner in operation after T1_IGN
• 1-signal: the igniter was ignited within the safety time
• 0-signal: igniter not in operation
If the ignition was switched off (IGN_ON or TEST_OFF = 0) and
the flame still exists (IGN_OP = 1), the output remains set. It is
reset if the flame no longer exists.
ERROR F-BOOL Ignition error
• 1-signal: one or several errors exist.
• 0-signal: no errors exist in the ignition process.
QUIT_ON F-BOOL Acknowledgement pending at input QUIT
The ignition function is started with a 1-signal coming from function F_GAS_BU or
F_OIL_BU, providing the function is ready for operation.
It is ready for operation if all safety criteria (main interlocking and operation
interlock) are fulfilled, no other programs are in operation, and no unacknowledged
failure is pending.
The ignition function can also be started independently by functions F_GAS_BU or

F_OIL_BU with an active 1-signal at TEST_ON and TEST_OFF, providing the
function is ready for operation.
Output OPEN_V then provides a 1-signal and triggers the ignition gas valves to
open. Within the configured safety time, the ignition transformer is now controlled
via the TRANSF output (pulse duration T2_TRANSF).
A 1-signal from the ignition flame detector should now be pending at input
IGN_OP. If this is the case, output IGN_OPAT supplies a 1-signal (igniter in
operation); otherwise, there is a failure message at output ERROR, which cancels
the ignition process. The failure message can be reset with QUIT. The ignition
process must then be restarted manually.

Entry-ID: 109751614, V2.2, 12/2018 33
3.3.4 Time diagrams
Signal behavior
The picture below shows the signal behavior of function F_IGNTR.
Figure 3-9
1) 2) 3) 4) 5) 6) 7) 8) 9)
IGN_ON Igniter on
TEST_ON Igniter test on
TEST_OFF Igniter test off
QUIT Error acknowledgement
MAIN_INTL Igniter interlocking fulfilled
OP_INTL Step enabling condition fulfilled
IGN_OP Igniter in operation, Igniter flame
PRG_RUN other programs running
RUN_TFAIL Run time exceeded
BU_OP Burner in operation
IGN_READY Igniter ready for operation

IGN_TEST Igniter test on
IGN_ENGD Igniter activated
OPEN_V Ignition fuel valve open
TRANSF Activate ignition transformer
IGN_OPAT Igniter in operation after T_IGN
ERROR Igniter error
QUIT_ON Acknowledgement
T2_TRANSF T2_TRANSF
T_IGN T_IGN
Legend: Input = 1
Input irrelevant
Output = 1

Entry-ID: 109751614, V2.2, 12/2018 34

1) Main interlocking fulfilled (MAIN_INTL=1)
Ignition function ready for operation (IGN_READY=1)
2) Operation interlock fulfilled (OP_INTL=1)
Start of ignition function (IGN_ON=1)
“Ignition function controlled” message (IGN_ENGD=1)
Ignition gas valves opened (OPEN_V=1)
Ignition transformer controlled (TRANSF=1)
Timer T1_IGN for ignition safety time starts
Timer T2_TRANSF for ignition transformer starts
3) Time T2_TRANSF has expired
Ignition transformer no longer controlled (TRANSF=0)
4) IGN_OP=1: flame detector reports ignition flame
5) After T1_IGN has expired, and IGN_OP pending, the message
“igniter successfully ignited” (IGN_OPAT=1) is output
6) Igniter function switched off (IGN_ON=0)
Igniter function no longer in operation (IGN_ENGD=0)
Ignition gas valves are closed (OPEN_V=0)
7) The ignition flame is deleted (IGN_OP=0)
Message at output IGN_OPAT is reset
8) Igniter test is started when ignition command is pending

9) If IGN_ON is reset prior to ignition, the ignition process
is cancelled.

Entry-ID: 109751614, V2.2, 12/2018 35
Signal behavior of the igniter test

The picture below shows the optimal signal behavior of function F_IGNTR during
testing.
Figure 3-10
1) 2) 3) 4) 5) 6) 7) 8)
IGN_ON Igniter on
TEST_ON Igniter test on
TEST_OFF Igniter test off
MAIN_INTL Igniter interlocking fulfilled
OP_INTL Step enabling condition fulfilled
IGN_OP Igniter in operation, Igniter flame
PRG_RUN other Programs running
RUN_TFAIL Run time exceeded
BU_OP Burner operation
IGN_READY Igniter ready

IGN_TEST Igniter test on
IGN_ENGD Igniter engaged
OPEN_V Ignition fuel valve open
TRANSF Activate ignition transformer
IGN_OPAT Igniter in operation after T_IGN
ERROR Igniter error
T2_TRANSF
T1_IGN
Legend: Input = 1
Input irrelevant
Output = 1

Entry-ID: 109751614, V2.2, 12/2018 36
Description of the signal behavior during testing:

1) Main interlock and operation interlock fulfilled
(OP_INTL=1, MAIN_INTL=1)
Ignition function ready for operation (IGN_READY=1)
2) TEST_OFF set
Start of ignition test with positive edge at input TEST_ON
“Igniter controlled” message (IGN_ENGD=1)
Ignition gas valves opened (OPEN_V=1)
Ignition transformer controlled (TRANSF=1)
Timer T1_IGN for ignition safety time starts,
Timer T2_TRANSF for ignition transformer starts
3) T2_TRANSF has expired,
Ignition transformer no longer controlled (TRANSF=0)
4) IGN_OP=1: flame detector reports ignition flame
5) After T1_IGN has expired, and IGN_OP pending, the “igniter successfully
ignited” message (IGN_OPAT=1) is output
6) IGN_ON switches to normal operation mode (IGN_ON = 1)
Ignition test mode terminated (IGN_TEST = 0)
7) Igniter function switched off (IGN_ON=0)
Igniter function no longer controlled (IGN_ENGD=0)
Ignition gas valves are closed (OPEN_V=0)

8) Ignition flame deleted (IGN_OP=0)
Message at output IGN_OPAT reset

Entry-ID: 109751614, V2.2, 12/2018 37
3.3.5 Status graph

Figure 3-11
19
18
Initial state
14
13 28
1
27 2
25
16 17
3 Ready 6
24
Start-up Test start-up
11 23
4 Pilot flame 7
12 20a
monitoring
20b
Reset ignition
Reset ignition transformator
transformator 26 test mode
21a
5 21b Error 8
9
Pilot in 22b 22a Pilot test in
operation operation
10

Entry-ID: 109751614, V2.2, 12/2018 38

Table 3-9
Transition Condition for Transition
1 MAIN_INTL == 1 AND
PRE_INTL == 1 AND
(IGN_OP == 0 OR PFSF_MODE == 1) AND
RUN_TFAIL = 0
2 MAIN_INTL == 0 OR
PRE_INTL == 0 OR
RUN_TFAIL == 1
3 RUN_TFAIL == 0 AND
ERROR == 0 AND
OP_INTL == 1 AND
IGN_ON == 1
4 T2_TRANSF elapsed
5 IGN_OP == 1 AND T1_IGN elapsed
6 PRG_RUN == 0 AND
ERROR == 0 AND
OP_INTL == 1 AND
RUN_TFAIL == 0 AND
TEST_ON == 1 AND
TEST_OFF == 1 AND
IGN_ON == 0
7 T2_TRANSF elapsed
8 IGN_OP == 1 AND T1_IGN elapsed
9, 11 IGN_ON == 1
10 IGN_ON == 0 AND
TEST_ON == 1 AND
TEST_OFF == 1 AND
BU_OP == 0
12 OP_INTL == 0 AND
(IGN_ON == 1 OR
(TEST_ON == 1 AND TEST_OFF == 1)
)
13 IGN_ON == 0
14 TEST_OFF == 0 OR
BU_OP == 1
16 IGN_ON == 0
17 BU_OP == 1 OR
TEST_OFF == 0
18 IGN_ON == 0
19 BU_OP == 1 OR TEST_OFF == 0
20a, 20b MAIN_INTL == 0 OR OP_INTL == 0
21a, 21b MAIN_INTL == 0 OR OP_INTL == 0 OR T1_IGN elapsed
22a, 22b MAIN_INTL == 0 OR OP_INTL == 0 OR IGN_OP == 0
23 QUIT == rising edge

Entry-ID: 109751614, V2.2, 12/2018 39

24, 25 PFSF_MODE == 0 AND IGN_OP == 1 and
(IGN_ON == 0 OR
(TEST_ON == 0 AND TEST_OFF == 0)
)
26 T_PFSF elapsed
27 PFSF_MODE == 1 OR IGN_OP == 0 AND
(MAIN_INTL == 0 OR PRE_INTL == 0 OR RUN_TFAIL == 1)
28 PFSF_MODE == 1 OR IGN_OP == 0 AND
(MAIN_INTL == 1 AND PRE_INTL == 1 AND RUN_TFAIL == 0)
Table 3-10
Status Outputs, to be switched
Initial State No outputs switched
Ready IGN_READY := TRUE
Start-up IGN_ENGD := TRUE
OPEN_V := TRUE
IGN_TEST := FALSE
T1_IGN and T2_TRANSF start

TRANSF := TRUE
Test Start-up IGN_ENGD := TRUE
OPEN_V := TRUE
IGN_TEST := TRUE
T1_IGN and T2_TRANSF start

TRANSF := TRUE
Reset ignition transformer TRANSF := FALSE
IGN_TEST := FALSE
Reset ignition transformer TRANSF := FALSE
Test mode IGN_TEST := TRUE
Pilot in operation T1_IGN elapsed
IGN_OPAT := TRUE
IGN_TEST := FALSE
Pilot test in operation T1_IGN elapsed
IGN_OPAT := TRUE
IGN_TEST := TRUE
Pilot flame monitoring T_PFSF starts
IGN_READY := FALSE
Error ERROR := TRUE
IGN_READY := FALSE
IGN_ENGD := FALSE
OPEN_V := FALSE
TRANSF := FALSE
IGN_TEST := FALSE

Entry-ID: 109751614, V2.2, 12/2018 40
3.4 Function for controlling the functions of an oil burner

(F_OIL_BU)
3.4.1 Introduction
The failsafe function F_OIL_BU initiates starting an oil burner by controlling the
ignition function. After successfully igniting the igniter, this function opens the
safety shut-off valves of the burner as well as the atomizer valves and checks
whether an ignition has occurred within a defined time.
These functionalities are realized by the function in single-burner and multi-burner
mode.
Figure 3-12
CIC_F_OIL_BU
The picture above shows the chart-in-chart view of F_OIL_BU as it is available in
• ERROR_OP with ERROR_IN
• FILL_REQ with FILL_REQ_IN
• T_RUNNING with T_RUNNING_IN
• T_RUN_UP with T_RUN_UP_IN
• IGN_START with IGN_START_IN

Entry-ID: 109751614, V2.2, 12/2018 41
• F_AND4 (FB301)
• F_OR4 (FB 302)
• F_NOT (FB304)
• F_SR_FF (FB 308)
• F_RS_FF (FB307)
• F_TON (FB 343)
• F_F_TRIG (FB347)
3.4.2 Connections
Table 3-11

Inputs
PRE_INTL F-BOOL Switch on interlock
• If a 1-signal is active at this input, the oil burner function is
ready for operation.
After the burner has been started via OIL_BU_ON, this input is no
longer evaluated
ST_INTL F-BOOL Start-up interlock
• If a 1-signal is active at this input, the oil burner function can
be started.
This input is only evaluated during the startup process (starting
with OIL_BU_ON=1 to OIL_OPAT=1)
• If a 1-signal is active at this input, the oil burner function can
be operated.
This input is only evaluated after the function is in operation
(OIL_OPAT=1)
OIL_BU_ON F-BOOL “Switch on oil burner” command
A positive edge starts the burner function.
OIL_BU_OFF F-BOOL “Switch off oil burner” command
A positive edge terminates the operation of the burner
V_IGNPOS F-BOOL Oil control valve in ignition position
• 1-signal: oil control valve in ignition position.
• 0-signal: oil control valve is not in ignition position.
OILFIRE F-BOOL Flame detected
• 1-signal: flame detected
• 0-signal: no flame exists.
If a flame has already been detected prior to the startup and other
burners are in operation, it is assumed, that other burners are
ignited and therefore an ignition position needs not be approached
for the fuel valves and air dampers.

Entry-ID: 109751614, V2.2, 12/2018 42

OIL_OK F-BOOL Oil criteria fulfilled
• 1-signal: oil criteria fulfilled.
• 0-signal: oil criteria not fulfilled.
Oil criteria are all fuel-related conditions necessary for a safe
operation
AIRFL_OK F-BOOL Joint air flow criteria fulfilled
• 1-signal: air criteria fulfilled
• 0-signal: Air criteria not fulfilled
Air criteria are all combustion air related conditions necessary for a
safe operation.
• 1-signal: igniter successfully ignited
• 0-signal: igniter did not ignite
• 1-signal: other burners in operation
• 0-signal: other burners not in operation
If other burners are already in operation and a flame detected prior

to startup, it is assumed that other burners are ignited and
therefore an ignition position needs not be approached for fuel
valves and air dampers.
Error acknowledgements are reset with this input parameter, the
acknowledgement occurs at positive edge
STV_OPEN F-BOOL Atomization valve opened
• 1-signal: atomizer valve open
• 0-signal: atomizer valve closed
BV_CLOSED F-BOOL Cleaning valve closed
• 1-signal: cleaning valve closed
• 0-signal: cleaning valve opened
CLEAN_OK F-BOOL Cleaning program terminated
• 1-signal: burner was cleaned prior to startup
• 0-signal: no time for filling the oil lance needs to be taken into
account
T_DRAIN F-TIME Atomizer vapor drainage
Time in which the cleaned parts can be drained. Subsequently,
ignition is initialized.
(Time between opening the atomizer valve and controlling the
ignition function)
• Guide value: 0min < T_DRAIN < 2min
T_IGN F-TIME Gas burner safety time
Within this time, the burner must have ignited successfully.
• Guide value: 0min < T_IGN < 1min
T_FILL_IGN F-TIME Oil burner safety time and filling time
Within this time, the burner must have ignited successfully.
Apart from the actual safety time, this time also contains the time
required for filling the oil lance
• Guide value: 0min < T_FILL_IGN < 2min

Entry-ID: 109751614, V2.2, 12/2018 43

T_MFSF F-TIME Monitoring time for the flame detector (stray light test)
• If a pilot flame Is longer than the time T_MFS_FAIL reported
(OILFIRE = 1) although the oil burner function is not in
operation (OIL_OPAT = 0), an error is detected.
• Monitoring will take place only when the high temperature
operation or “lead” burner is not active (BU_OP = 0)
FILL_REQ_IN F-BOOL FILL_REQ must be wired to this feedback input
T_RUNNING_IN F-BOOL T_RUNNING must be wired to this feedback input
T_RUN_UP_IN F-BOOL T_RUN_UP must be wired to this feedback input
IGN_START_IN F-BOOL ING_START must be wired to this feedback input
Outputs
OIL_RUN F-BOOL Oil startup program running
• 1-signal: oil startup program in operation
• 0-signal: oil startup program not started or start conditions not
fulfilled
OPEN_STV F-BOOL Open the atomizer valve
• 1-signal: oil atomizer valve is controlled
•
0-signal: oil atomizer valve is or remains closed

IGN_ON F-BOOL Switch on the igniter
• 1-signal: the ignition function is controlled
• 0-signal: the ignition function is not controlled
OPEN_V F-BOOL Controlling the safety shut-off valves
• 1-signal: safety shut-off valves are opened
• 0-signal: safety shut-off valves are closed or remain closed
OIL_OPAT F-BOOL Oil burner in operation after T_IGN
• 1-signal: burner was ignited within the safety time
• 0-signal: burner not in operation
FILL_REQ F-BOOL Oil lance blow out
• 1-signal: oil lance cleaned
• 0-signal: oil lance not cleaned
ERROR_OP F-BOOL Cancelled operation
• 1-signal: one or several errors exist, which have occurred
during operation
T_RUNNING F-BOOL Feedback output
T_RUN_UP F-BOOL Feedback output
IGN_START F-BOOL Feedback output

Entry-ID: 109751614, V2.2, 12/2018 44
The F_OIL_BU function is started by a positive edge at the OIL_BU_ON input.

However, the conditions of the switch-on interlock (PRE_INTL=1) and the startup-
interlock (ST_INTL) must be fulfilled.
If the burner is in single operation mode, it cannot be started while the main flame
detector reports a flame (OILFIRE=1). In multi-burner mode (BU_OP=1), the oil
startup program starts even if a flame has been detected.
If the burner is in single operation mode, the fuel control valves and the air
dampers need to be in ignition position (V_IGNPOS and AD_IGNPOS=1).
In both cases, the air and oil criteria (e.g. oil pressure valid) must be fulfilled
(AIRFL_OK=1 and OIL_OK=1) for controlling the ignition function.
If all these conditions apply, output OPEN_STV (controlling the atomizer valve) and
output OIL_RUN are set to "1". If the atomizer valve is opened, a positive signal is
pending at input STV_OPEN an timer T_DRAIN (time for draining the atomizer
vapor) starts.
After the configured time has expired, the ignition function (output IGN_ON=1) is
controlled.
If during the ignition process one or several conditions OIL_OK or AIRFL_OK (in
single-burner mode additionally AD_IGNPOS and V_IGNPOS, in multi-burner

mode OILFIRE and BU_OP) are no longer fulfilled and then become active again,
a new start command must first be sent to OIL_BU_ON before OIL_RUN has a 1-
signal again.
Upon the expiry of safety time T_IGN at the latest, a flame needs to be detected
via the OILFIRE input. Furthermore, a 1-signal must then be pending at the
OP_INTL (operation interlock) input at the latest. A successful ignition of the burner
is signaled via the OIL_OPAT output.
The operation of the burner can be stopped at any time with a positive edge at the
OIL_BU_OFF input.
If the burner has been cleaned (input CLEAN_OK=1), T_FILL_IGN is used as the
safety time. Apart from the actual safety time, T_FILL_IGN (as opposed to T_IGN)
also contains the time required for filling the oil lance.
During operation, the operation locks, air conditions and oil conditions must be
fulfilled and the flame exist. (i.e. a 1-signal must be active at inputs OP_INTL,
AIRFL_OK, OIL_OK and OILFIRE)
A failure shutdown is performed if a 0-signal is active at the input of the operation
interlock (OP_INTL), of the gas conditions (OIL_OK), the air conditions
(AIRFL_OK) or at the input of the main flame (OILFIRE). If this is the case, the
ERROR_OP output will be set. It must be reset with a positive edge at input QUIT
prior to the next start.

Entry-ID: 109751614, V2.2, 12/2018 45
3.4.4 Time diagrams
Signal behavior
The picture below shows the optimal signal behavior of function F_IGNTR.
Figure 3-13
Case 1: Case 2:
1) 2) 3) 4) 5) 6) 7) 8) 1) 2) 3) 4) 5) 6) 7) 8)

ST_INTL Start up interlock
OP_INTL Operation interlock
OIL_BU_ON Start oil burner
OIL_BU_OFF Stop oil burner
V_IGNPOS Valves in igniter position
OILFIRE Fire detected
OIL_OK Oil criteria fulfilled
STV_OPEN Atomizer valve open
BV_CLOSED Cleaning valve closed
AD_IGNPOS Air damper in ignition position
AIRFL_OK Air criteria fulfilled
BU_OP other burner in operation
CLEAN_OK Cleaning program finished
OIL_RUN Cleaning program running

OPEN_STV Opening atomizer vlave
IGN_ON Activating Igniter
OPEN_V Opening oil valve
OIL_OPAT Oilburner in opertaion after T_IGN
FILL_REQ Oil lance blown out
ERROR_OP Error
T_DRAIN T_DRAIN
T_IGN T_FILL_IGN
Legend: Input = 1
Input irrelevant
Output = 1
Case 1: no filling time is needed for the oil lance

Oil criteria fulfilled (OIL_OK=1)
2) Starting the burner with positive edge at input OIL_BU_ON
Oil startup program running (OIL_RUN = 1)
Atomizer valve opened (OPEN_STV=1)
3) Atomizer valve is open (STV_OPEN=1)
Timer T_DRAIN for drainage starts
4) After the timer has expired, the igniter is controlled (IGN_ON=1).
Cleaning valve is closed (BV_CLOSED=1)

Entry-ID: 109751614, V2.2, 12/2018 46

(OP_INTL=1)
Flame is detected (OILFIRE=1)
7) Burner successfully ignited (OIL_OPAT=1)
8) Cancellation by stop command at input OIL_BU_OFF
Case 2: oil lance must be filled

Oil criteria fulfilled (OIL_OK=1)
Burner cleaned prior to startup (CLEAN_OK=1)
Output "oil lance blow out" is set (FILL_REQ=1)

Safety time T_FILL_IGN is started
(OP_INTL=1)
FILL_REQ reset

Entry-ID: 109751614, V2.2, 12/2018 47
Signal behavior in multi-burner mode

If several burners are operated in a combustion chamber, the first burner is ignited
by means of the preceding time diagram.
“Flame detected” exists for all further burners (OILFIRE=1). Inputs V_IGNPOS and
AD_IGNPOS need not be pending for these burners.
Figure 3-14
1) 2) 3) 4) 5) 6) 7) 8)

ST_INTL Start up interlock
OP_INTL Operation interlock
OIL_BU_ON Start oil burnerr
OIL_BU_OFF Stop oil burner
V_IGNPOS Valve in ignition position
OILFIRE Flame detected
OIL_OK Oil criteria fulfilled
STV_OPEN Atomizer valve open
BV_CLOSED Cleaning vlave closed
AD_IGNPOS Air damper in ignition position

AIRFL_OK Air criteria fulfilled
BU_OP other burner in operation
OIL_RUN Cleaning program running
OPEN_STV Opening atomizer valve
IGN_ON Activating igniter
OPEN_V Opening oil vlave
OIL_OPAT Oil burner in operation after T_IGN
FILL_REQ Oil lance blown out
ERROR_OP Error
T_DRAIN
T_IGN
Legend: Input = 1
input irrelevant
Output = 1

Entry-ID: 109751614, V2.2, 12/2018 48
Description of the optimal signal behavior in multi-burner mode:

Flame was detected (OILFIRE=1)
Gas criteria fulfilled (OIL_OK=1)
Other burners are in operation (BU_OP=1)
(OP_INTL=1)


Entry-ID: 109751614, V2.2, 12/2018 49
3.4.5 Status graph

Figure 3-15
Help State 16a

(state not
accessible)
Initial state 15a
12
10a+b 2 1 Error flame

15b detector
Ready
11a+b 3b
3a
16b
17
8
Start-up
4 Error
13a+b
Drainage
14a+b 9
5
7b
Activate Burner in
ignition operation
Open Safety 7a
shut-off
valves

Entry-ID: 109751614, V2.2, 12/2018 50

Table 3-12
1 PRE_INTL == 1
2 PRE_INTL == 0
(CLEAN_OK == 1 (see Table 3-14) OR
CLEAN_OK == 0 (see
Table 3-13))
AND
Rising edge at OIL_BU_ON AND

ST_INTL == 1 AND
OIL_BU_OFF == 0 AND
ERROR_OP == 0 AND
OIL_OK ==1 AND
AIRFL_OK == 1 AND
V_IGNPOS == 1 AND
AD_IGNPOS == 1 AND
BV_CLOSED == 1 AND
OILFIRE == 0 AND
BU_OP == 0
(CLEAN_OK == 1 (see Table 3-14) OR
CLEAN_OK == 0 (see
Table 3-13)
AND
Rising edge at OIL_BU_ON AND

ST_INTL == 1 AND
OIL_BU_OFF == 0 AND
ERROR_OP == 0 AND
OIL_OK ==1 AND
AIRFL_OK == 1 AND
OILFIRE ==1 AND
BU_OP ==1 AND
BV_CLOSED == 1
4 STV_OPEN == 1
5 Timer T_DRAIN elapsed
6 IGN_OP == 1
7a (OILFIRE == 1 AND OP_INTL == 1 within the safety time T_IGN)
OR
FILL_REQ == 1 (see Table 3-14 AND

T_FILL_IGN elapsed AND OILFIRE == 1

Entry-ID: 109751614, V2.2, 12/2018 51

7b T_IGN elapsed AND OILFIRE == 1
OR
FILL_REQ == 1 (see Table 3-14) AND

T_FILL_IGN elapsed AND OILFIRE == 0
8 OIL_BU_OFF == 1
9 OIL_OK == 0 OR
AIRFL_OK == 0 OR
OILFIRE == 0 OR
OP_INTL == 0
OIL_BU_OFF == 1 OR
OIL_OK == 0 OR
AIRFL_OK == 0 OR
ST_INTL == 0 OR
V_IGNPOS == 0 OR
AD_IGNPOS == 0 OR
BV_CLOSED == 0
11a, 13a Single burner operation:

OIL_BU_OFF == 1 OR
OIL_OK == 0 OR
AIRFL_OK == 0 OR
ST_INTL == 0 OR
V_IGNPOS == 0 OR
AD_IGNPOS == 0 OR
BV_CLOSED == 0 OR
STV_OPEN == 0
OIL_BU_OFF == 1 OR
OIL_OK == 0 OR
AIRFL_OK == 0 OR
ST_INTL == 0 OR
(OILFIRE ==0 AND BU_OP ==1) OR
BV_CLOSED == 0
11b, 13b Multiple burner operation:
OIL_BU_OFF == 1 OR
OIL_OK == 0 OR
AIRFL_OK == 0 OR
ST_INTL == 0 OR
BV_CLOSED == 0 OR
STV_OPEN == 0
12 Rising edge at QUIT

Entry-ID: 109751614, V2.2, 12/2018 52

OIL_BU_OFF == 1 OR
OIL_OK == 0 OR
AIRFL_OK == 0 OR
ST_INTL == 0 OR
STV_OPEN == 0 OR
BV_CLOSED == 0 OR
IGN_OP == 0 OR
V_IGNPOS == 0 OR
AD_IGNPOS == 0
OIL_BU_OFF == 1 OR
OIL_OK == 0 OR
AIRFL_OK == 0 OR
ST_INTL == 0 OR
STV_OPEN == 0 OR
BV_CLOSED == 0 OR
IGN_OP == 0 OR

(OILFIRE ==1 AND BU_OP ==0)

15a, 15b BU_OP := FALSE AND
OILFRE := TRUE AND
16a OILFIRE == 0 OR BU_OP == 1
16b (OILFIRE == 0 OR BU_OP == 1 ) AND
PRE_INTL == 1
17 Monitoring time elapsed T_MFSF

Entry-ID: 109751614, V2.2, 12/2018 53
Table 3-13 Status graph of the function block F_OIL_BU outputs (for CLEAN_OK == 0)
Status Outputs switched
Initial State No outputs switched
Ready No switched outputs
Start-up OIL_RUN := TRUE
OPEN_STV := TRUE
Drainage Timer T_DRAIN started
Activate ignition IGN_ON := TRUE
Open OPEN_V := TRUE
Safety shut-off valve Safety time T_IGN or starts
Burner in operation OIL_OPAT := TRUE
OIL_RUN := FALSE
IGN_ON := FALSE
Error flame detector Timer T_MFSF starts
ERROR_OP := TRUE
Error OPEN_V := FALSE
OIL_OPAT := FALSE
Table 3-14 Status graph of the function F_OIL_BU Outputs (for CLEAN_OK = 1)
Status Output switched
Initial Status No switched outputs
Ready No switched outputs
Start-up OIL_RUN := TRUE
OPEN_STV := TRUE
FILL_REQ := TRUE
Drainage Timer T_DRAIN started
Activate ignition IGN_ON := TRUE
Open OPEN_V := TRUE
Safety shut-off valves Safety time T_FILL_IGN starts
Burner in operation OIL_OPAT := TRUE
OIL_RUN := FALSE
IGN_ON := FALSE
FILL_REQ := FALSE
Error flame detector Timer T_MFSF starts
ERROR_OP := TRUE
Error OPEN_V := FALSE
OIL_OPAT := FALSE

Entry-ID: 109751614, V2.2, 12/2018 54
3.5 Function for cleaning the oil burner (F_OIL_CLEAN)

3.5.1 Introduction
The failsafe function F_OIL_CLEAN initiates and monitors the cleaning program for
the oil burner. It controls the ignition function and the cleaning valve and monitors
the time required for blowing out the oil lance
This function can be used for cleaning the oil burner prior to startup or after
operation. The function was previously named F_OIL_ST.
Figure 3-16
CIC_F_OIL_CLEAN
The picture above shows the chart-in-chart view of F_OIL_CLEAN as it is available
in the library with the invisible feedbacks.
To guarantee the complete functionality, you need to interconnect
• ERROR auf ERROR_IN
• RES_OIL_CL auf RES_OIL_CL_IN
• CLEAN_OK auf CLEAN_OK_IN

Entry-ID: 109751614, V2.2, 12/2018 55
• F_AND4 (FB301)
• F_OR4 (FB 302)
• F_NOT (FB304)
• F_SR_FF (FB 308)
• F_RS_FF (FB307)
• F_TON (FB 343)
• F_TP (FB 324)

Entry-ID: 109751614, V2.2, 12/2018 56
3.5.2 Connections

Table 3-15
Name Data Description
type
Inputs
OIL_CL_ON F-BOOL Cleaning program ON command
A positive edge starts the cleaning function
PRG_RUN F-BOOL Other programs are running
As long as a 1-signal is pending here, other functions are in operation,
which prevent the ignition test from being switched on
MAIN_INTL F-BOOL Main interlock for cleaning program
• 1-signal: required operating conditions are fulfilled
• 0-signal: required operating conditions are not fulfilled
IGN_READY F-BOOL Step enabling conditions
• 1-signal: ignition function is ready for operation.
•
0-signal: ignition function is not ready for operation.

OIL_LANCE_ OK F-BOOL Oil lance retracted
• 1-signal: oil lance retracted
• 0-signal: oil lance not retracted
• 1-signal: igniter in operation
• 0-signal: igniter not in operation
OV_CLOSED F-BOOL Safety shut-off valves closed
• 1-signal: safety shut-off valves closed
• 0-signal: safety shut-off valves not closed
STV_OPENED F-BOOL atomizer valve open
• 1-signal: atomizer valve open
• 0-signal: atomization valve not open
AP_MIN_OK F-BOOL Atomizer pressure > MIN
• 1-signal: atomizer pressure above minimal limit
• 0-signal: atomizer pressure not above minimal limit
BV_OPEN F-BOOL Cleaning valve opened
• 1-signal: cleaning valve opened
• 0-signal: cleaning valve not open
OIL_CL_RES F-BOOL Reset the cleaning program
1-signal: reset CLEAN_OK
Error messages are reset with this input parameter.
The acknowledgement is only given at positive edge.
OIL_CL_OFF F-BOOL Switch off cleaning program
A positive edge terminates the operation of the cleaning program

Entry-ID: 109751614, V2.2, 12/2018 57

type
T_BL_OUT F-TIME Cleaning time
The time describes how long the cleaning valve shall be opened.
• Guide value: 0min < T_BL_OUT < 40min
T_MAX F-TIME Runtime for cleaning program
Maximal permitted runtime for the cleaning program.
• Guide value: 0min < T_MAX < 60min
RES_OIL_CL_IN F-BOOL RES_OIL_CL must be wired to this feedback input
CLEAN_OK_IN F-BOOL CLEAN_OK must be wired to this feedback input
Outputs
CL_RUN F-BOOL Cleaning program running
• 1-signal: cleaning program running
• 0-signal: cleaning program not running
IGN_ON F-BOOL Controlling the ignition function
• 1-signal: controlling the ignition function
• 0-signal: ignition function not controlled
OIL_BU_OFF F-BOOL Switch off oil burner
• 1-signal: oil burner switched off

• 0-signal: oil burner not switched off
OPEN_BV F-BOOL Controlling cleaning valve OPEN
• 1-signal: open the cleaning valve
• 0-signal: do not open the cleaning valve
CLEAN_OK F-BOOL Cleaning program terminated
• 1-signal: cleaning program terminated successfully
• 0-signal: cleaning program not terminated
ERROR F-BOOL Failure in the cleaning program
• 1-signal: one or several errors exist
• 0-signal: no errors exist
ERROR F-BOOL Feedback output
RES_OIL_CL F-BOOL Feedback output

Entry-ID: 109751614, V2.2, 12/2018 58
Cleaning program F_OIL_CLEAN is started by means of input OIL_CLEAN_ON.

Operation interlock (MAIN_INTL=1) must be fulfilled here and no other program
must be in operation (PRG_RUN=0).
Starting up the cleaning program is signaled via output "Startup program running"
(CL_RUN).
After starting the startup program (for single-burner control) the ready message of
the ignition function is waited for (IGN_READY=1). Furthermore, the oil lance must
have retracted (OIL_LANCE_OK=1).
If this was the case, the ignition function is controlled with the IGN_ON command.
After the igniter has ignited successfully (IGN_OP=1), a possible operated oil
burner is stopped with the OIL_BU_OFF command.
If the safety shut-off valves are closed (OV_CLOSED=1), the atomizer valve open
(STV_OPENED=1), the atomizer pressure above the minimal limit
(AP_MIN_OK=1), and the air damper in ignition position (AD_IGNPOS=1), the
cleaning valve will be opened (OPEN_BV=1).
The cleaning time T_BL_OUT starts with the cleaning valve open feedback
(BV_OPEN=1).
After the cleaning time has expired, the cleaning program terminated message
(CLEAN_OK) appears.
Timer T_MAX monitors the entire cleaning program. When exceeding the
configured runtime, the program is cancelled and an error bit is set.

Entry-ID: 109751614, V2.2, 12/2018 59
The picture below shows the signal behavior of function F_OIL_CLEAN.

Figure 3-17
1) 2) 3) 4) 5) 6) 7)
OIL_CL_ON Start oil cleaning program

PRG_RUN Other programs active
MAIN_INTL Main interlocking
IGN_READY Igniter ready
OIL_LANCE_OK Oil lance in igniter position
OV_CLOSED Oil valves closed
STV_OPENED Atomizer valve opened
AP_MIN_OK Atomizer steam pressure >MIN
AD_IGNPOS Air damper in igniter position

BV_OPEN Cleaning valve open
OIL_CL_RES Reset oil cleaning program
OIL_CL_OFF Stop Cleaning program
CL_RUN Cleaning program active
IGN_ON Igniter activated
OILBU_OFF Oil burner off
OPEN_BV Activation blow out valve open
ERROR Error
T_BL_OUT
T_MAX
Legend: Input = 1
Input irrelevant
Output = 1

Entry-ID: 109751614, V2.2, 12/2018 60

1) Main interlock fulfilled (MAIN_INTL=1)
Igniter ready (IGN_READY=1)
Oil lance retracted (OIL_LANCE_OK=1)
No other programs running (PRG_RUN=0)
2) Starting the cleaning program with a positive edge at input OIL_CL_ON
Cleaning program running (output CL_RUN=1)
Ignition function is controlled (IGN_ON=1)
Runtime monitoring is started
Oil burner switched off (OIL_BU_OFF=1)
4) Safety shut-off valves closed (OV_CLOSED=1)
Atomizer valve opened (STV_OPENED=1)
Atomizer pressure > MIN (AP_MIN_OK=1)
Air damper in ignition position (AD_IGNPOS=1)
Cleaning valve is opened (OPEN_BV=1).
5) Cleaning valve is open (BV_OPEN=1)
Cleaning time is started (T_BL_OUT)
6) Cleaning time has expired
Cleaning program was terminated (CLEAN_OK=1)
Cleaning program was completed before T_MAX has expired

7) Reset by means of positive edge at input OLPR_RS

Entry-ID: 109751614, V2.2, 12/2018 61
3.5.5 Status graph

Figure 3-18
Initital
condition
2 1
Ready
23
3
Cleaning
9 12
program runs
13
11
4
Error 10 Start up
16
14
5
22
15
18 17 Oil burner off
6 19
Activation 7 Cleaning 8 End

cleaning valve
21
20

Entry-ID: 109751614, V2.2, 12/2018 62

Table 3-16
1 MAIN_INTL == 1
2 MAIN_INTL == 0
3 OIL_CL_ON == pos. edge AND PRG_RUN == 0
4 IGN_READY == 1 AND OIL_LANCE_OK == 1
5 GN_OP == 1
6 OV_CLOSED == 1 AND AP_MIN_OK == 1 AND
STV_OPENED == 1 AND AD_IGNPOS == 1
7 BV_OPEN == 1
8 T_BL_OUT expired
9, 10 Monitoring time T_MAX expired
11 IGN_READY == 0 OR OIL_LANCE_OK == 0
12 MAIN_INTL == 0 OR OIL_CL_OFF == 1
13 IGN_READY == 0 OR OIL_LANCE_OK == 0
14 IGN_OP == 0
15 Monitoring time T_MAX expired

16 OIL_CL_OFF == 1 OR MAIN_INTL == 0
17 OIL_CL_OFF == 1 OR
MAIN_INTL == 0 OR
OIL_LANCE_OK == 0 OR
IGN_READY == 0 OR
IGN_OP == 0 OR
OV_CLOSED == 0 OR
STV_OPENED == 0 OR
AP_MIN_OK == 0 OR
AD_IGNPOS == 0
19 BV_OPEN == 1
After BV_OPEN == 0 restart cleaning time
21 Within cleaning time T_BL_OUT
OIL_CL_OFF == 1 OR
MAIN_INTL == 0 OR
OIL_LANCE_OK == 0 OR
IGN_READY == 0 OR
IGN_OP == 0 OR
OV_CLOSED == 0 OR
STV_OPENED == 0 OR
AP_MIN_OK == 0 OR
AD_IGNPOS == 0 OR
22 OIL_CL_RES == 1
23 OIL_CL_RES == 1
QUIT == 1

Entry-ID: 109751614, V2.2, 12/2018 63
Table 3-17
Initial state No outputs switched
Ready No outputs switched
CL_RUN := TRUE
cleaning program running
Start T_MAX
Startup IGN_ON := TRUE
Oil burner OFF OIL_BU_OFF := TRUE
Controlling cleaning valve OPEN_BV := TRUE
Cleaning Start of cleaning time T_BL_OUT
CLEAN_OK := TRUE
CL_RUN := FALSE
End IGN_ON := FALSE
OIL_BU_OFF := FALSE
OPEN_BV := FALSE
ERROR := TRUE
CL_RUN := FALSE
out of
IGN_ON := FALSE
9,10,15
OIL_BU_OFF := FALSE
OPEN_BV := FALSE
ERROR := TRUE
DIAG 13 := TRUE
Error CL_RUN := FALSE
out of 18,20
IGN_ON := FALSE
OIL_BU_OFF := FALSE
OPEN_BV := FALSE
CL_RUN := FALSE
IGN_ON := FALSE
out of 17, 21
OIL_BU_OFF := FALSE
OPEN_BV := FALSE

Entry-ID: 109751614, V2.2, 12/2018 64
3.6 Function for position monitoring (F_POS_CH)

3.6.1 Introduction
The F_POS_CH function monitors the position of the actuators for air and fuel for
keeping the given reference position. Furthermore, the function privies the option of
monitoring the reference positions for fuel and air for keeping a excess level of air
(see chapter 3.6.6). In the case of an error, the block sets an error bit and moves
the actuators to a configurable safe position.
Figure 3-19
CIC_F_POS_CH
The picture above shows the chart-in-chart view of F_POS_CH as it is available in
• SETP_POS1 with SETP_POS1_IN
• SETP_POS2 with SETP_POS2_IN
• T1_REF_EXP with T1_REF_EXP_IN
• T2_REF_EXP with T2_REF_EXP_IN

Entry-ID: 109751614, V2.2, 12/2018 65
• F_AND4 (FB301)
• F_OR4 (FB 302)
• F_NOT (FB304)
• F_LIM_R (FB 329)
• F_SR_FF (FB 308)
• F_RS_FF (FB307)
• F_TON (FB 343)
• F_ADD_R (FB321)
• F_SUB_R (FB322)
• F_MUX2_R(FB 332)

Entry-ID: 109751614, V2.2, 12/2018 66
3.6.2 Connections
All data type F-TIME inputs have T#0ms and all data type F-REAL inputs have 0.0
pre-assigned.
Table 3-18
Inputs
REF_POS1 F-REAL Reference position for actuator 1
• REF_POS1 must show a value between 0 and 100.
• Input is intended for fuel actuator!
• If REF_POS1 is larger REF_POS2 + MAXDIF, REF_ERROR
is reported, a reverse comparison is not performed.
REF_POS2 F-REAL Reference position for actuator 2
• REF_POS2 must show a value between 0 and 100.
• Input is intended for air actuator!
• REF_POS2 can have any value larger than REF_POS1!
MAXDIF is not evaluated at this input.
MAXDIF F-REAL Maximal difference REF_POS1 - REF_POS2
MAXDIF describes the maximal value by which REF_POS1 can be

larger than REF_POS2
• Limited to between 0 and 100.
• MAXDIF = 100 separates REF_POS1 and REF_POS2
TOL_1 F-REAL Tolerance for actuator 1
Maximal possible deviation (+/-) for actuator 1
TOL_2 F-REAL Tolerance for actuator 2
Maximal possible deviation (+/-) for actuator 2
SAFE_POS1 F-REAL Safety position for actuator 1
Position written to SETP_POS1 in the case of an error
SAFE_POS2 F-REAL Safety position for actuator 2
Position written to SETP_POS2 in the case of an error
POS1 F-REAL Measured position for actuator 1
Current position for actuator 1
POS2 F-REAL Measured position for actuator 2
Current position for actuator 2
• The acknowledgement is only given at positive edge.
T1_REF_CH F-TIME Time for actuator 1 (reference position change)
Time in which the reference position output via SETP_POS1 must
be read back to POS1

Entry-ID: 109751614, V2.2, 12/2018 67

T2_REF_CH F-TIME Time for actuator 2 (reference position change)
Time in which the reference position output via SETP_POS2 must
be read back to POS2
T1_TOL F-TIME Time for actuator 1 (actuator position change)
Time in which a valid position must be measured again at POS1, if
it was left without changing the reference position
T2_TOL F-TIME Time for actuator 2 (actuator position change)
Time in which a valid position must be measured again at POS2, if
it was left without changing the reference position
SETP_POS1_IN F-REAL SETP_POS1 must be wired to this feedback input
SETP_POS2_IN F-REAL SETP_POS2 must be wired to this feedback input
T1_REF_EXP_IN F-BOOL T1_REF_EXP must be wired to this feedback input
T2_REF_EXP_IN F-BOOL T2_REF_EXP must be wired to this feedback input
Outputs
REF_ERROR F-BOOL Reference error
• Value range 0-100 was violated
• Tolerances were not kept
• Difference between REF_POS1 and REF_POS2 is too large.
POS1_ERROR F-BOOL Position error for actuator 1

Actuator 1 in an invalid position after T1_REF_CH or T1_TOL.
POS2_ERROR F-BOOL Position error for actuator 2
Actuator 1 in an invalid position after T2_REF_CH or T2_TOL.
NO_POS1 F-BOOL Actuator 1 not in position
• 1-signal: actuator 1 in an invalid position
• 0-signal: actuator 1 in a valid position
NO_POS2 F-BOOL Actuator 2 not in position
• 1-signal: actuator 2 in an invalid position
• 0-signal: actuator 2 in a valid position
SETP_POS1 F-REAL Position for actuator 1
Position verified and output for actuator 1
SETP_POS2 F-REAL Position for actuator 2
Position verified and output for actuator 2
SETP_POS1 F-REAL Feedback output
SETP_POS2 F-REAL Feedback output
T1_REF_EXP Bool Feedback output
T2_REF_EXP Bool Feedback output

Entry-ID: 109751614, V2.2, 12/2018 68
The reference positions for actuator 1 and actuator 2 (inputs REF_POS1 and
REF_POS2) are checked for meeting a value range and for keeping a certain
difference before they are output via the outputs SETP_POS1 and SETP_POS2.
The inputs are used to check the reference values given by a non-safe controller
for plausibility.
The reference values must be between 0% (closed) and 100% (open). Parameter
MAXDIF allows configuring the maximal permitted difference between actuator 2
and actuator 1. It is assumed, that actuator 1 is used for the fuel and actuator 2 for
the air supply.
The difference is calculated according to the following rule:
REF_POS1 – REF_POS2 > MAXDIF under the requirement that the
characteristics of the actuators for gas and combustion air can be linearized with
sufficient accuracy (see chapter 3.6.6).
REF_ERROR is reported if MAXDIF is exceeded.
If the reference positions lie outside of the valid value range, the configured safety
positions SAFE_POS1 and SAFE_POS2 are given to the outputs SETP_POS1
and SETP_POS2.
A reference value is output at the REF_ERROR output.
The positions read back from the actuators (POS1 and POS2) are compared with
the positions (SETP_POS1 and SETP_POS2) output to the actuators.
If a reliable value range is violated (SETP_POS1 ± TOL_1 and SETP_POS2 ±
TOL_2), this causes the outputs NO_POS1 or NO_POS2 to be set.
If the measured positions (POS1 or POS2) leave the tolerance range without
changing the reference position, outputs NO_POS1 or NO_POS2 are also set.
Additionally, the timers T1_TOL or T2_TOL are started. If the measured positions
have not reentered the permitted value range within these times, output
POS1_ERROR or POS2_ERROR is set and the configured safety position
SAFE_POS1 or SAFE_POS2 is sent to output SETP_POS1 or SETP_POS2.
When a reference position (REF_POS1 or REF_POS2) changes, a timer is started.

If after the configured time (T1_REF_CH or T2_REF_CH) the measured position
POS1 or POS2 does not lie within the permitted value range, an error is output at
output POS1_ERROR or POS2_ERROR.
Furthermore, the configured safety positions SAFE_POS1 or SAFE_POS2 are
written to output SETP_POS1 or SETP_POS2.
If during time T1_REF_CH or T2_REF_CH the reference positions should change,
the timers start again.

Entry-ID: 109751614, V2.2, 12/2018 69
The picture below shows the signal behavior of function F_POS_CH.

Figure 3-20
REF_POS1 75 50 50 Reference position for actuator 1

REF_POS2 65 40 40 Reference position for actuator 2
MAXDIF 20 Maximum difference REF_POS1-REF_POS2
TOL_1 5 Tolerance for actuator 1
TOL_2 5 Tolerance for actuator 2
SAFE_POS1 0 Safety position for actuator 1
SAFE_POS2 100 Safety posirion for actuator 2
POS1 74 xx 53 Measured position 1
POS2 70 xx 39 Measured position 2
REF_ERROR Reference error
POS1_ERROR Position error 1
POS2_ERROR Position error 2
QUIT_ON Acknowledgement activated
NO_POS1 Actuator 1 not in position

NO_POS2 Actuator 2 not in position
SETP_POS1 75 50 50 Position for actuator 1
SETP_POS2 65 40 40 Position for actuator 2
<T1_REF_CH
<T2_REF_CH
Legend: Input = 1
Input irrelevant
Output = 1
65 measured analog input value
65 analog output value
xx input values changing
Description of the optimal signal behavior:

1) Reference position 1 changed from 75% to 50%
Reference position 2 changed from 65% to 40%
MAXDIF fallen short off
Reference positions within the valid value range
Reference positions written to outputs SETP_POSx
Timers Tx_REF_CH are started
Values read back via POSx change and are outside the tolerance
NO_POSx is set
2) The actuators have reached the correct positions within Tx_REF_CH
The are within the tolerance and MAXDIF is fallen short of
NO_POSx is reset

Entry-ID: 109751614, V2.2, 12/2018 70
3.6.5 Status graph

Figure 3-21
Initital
condition
1
4
11
Change of the Change of the

reference position current value
6 5
3
Actuators in a
valid
position
10a 10b 9b
9a
Error
Actuator 1 or 2
Status signal 8 in a valid
position

Entry-ID: 109751614, V2.2, 12/2018 71

Table 3-19
1 REF_POS1 ≠ POS1 +/- TOL_1 OR REF_POS2 ≠ POS2 +/- TOL_2
2 New REF_POS ≠ POS +- TOL
3 POS1 +/- TOL_1 == SETP_POS1 AND POS2 +/- TOL_2 == SETP_POS2
4 POS1 +/- TOL_1 ≠ SETP_POS1 OR POS2 +/- TOL_2 ≠ SETP_POS2
5 POS1 +/- TOL_1 == SETP_POS1 AND POS2 +/- TOL_2 == SETP_POS2
6 REF_POS1 – REF_POS2 > MAXDIF OR
100 < REF_POS1 < 0 OR
100 < REF_POS2 < 0
7 POS1 +/- TOL_1 ≠ SETP_POS1 OR POS2 +/- TOL_2 ≠ SETP_POS2
8 POS1 +/- TOL_1 == SETP_POS1 OR POS2 +/- TOL_2 == SETP_POS2
9a T1_TOL expired AND POS1 +/- TOL_1 ≠ SETP_POS1
9b T2_TOL expired AND POS2 +/- TOL_2 ≠ SETP_POS2
10a T1_REF_CH expired AND POS1 +/- TOL_1 ≠ SETP_POS1
10b T2_REF_CH expired AND POS2 +/- TOL_2 ≠ SETP_POS2
11 QUIT == 1 AND
REF_POS1 – REF_POS2 <= MAXDIF AND
100 > REF_POS1 > 0 AND
100 > REF_POS2 > 0
Table 3-20
Initial state
Changing the reference NO_POS1 := TRUE
position Start T1_REF_CH
NO_POS2 := TRUE
Start T2_REF_CH
Message NO_POS1 := TRUE
Start T1_REF_CH
NO_POS2 := TRUE
Start T2_REF_CH
Changing the read back NO_POS1 := TRUE
value Start T1_TOL
NO_POS2 := TRUE
Start T2_TOL
Actuators in position NO_POS1 := FALSE
NO_POS2 := FALSE
Actuator 1 or 2 in position NO_POS1 := FALSE
OR
NO_POS2 := FALSE

Entry-ID: 109751614, V2.2, 12/2018 72

REF_ERROR := TRUE
out of 6 SETP_POS1 := SAFE_POS1
SETP_POS2 := SAFE_POS2
POS1_ERROR := TRUE
out of
Error SETP_POS1 := SAFE_POS1
9a,10a
POS2_ERROR := TRUE
out of
9b,10b
3.6.6 Calculation example for MAXDIF f(REF_POS1, λmin)
𝑴𝑨𝑿𝑫𝑰𝑭 𝒇(𝑹𝑬𝑭_𝑷𝑶𝑺𝟏,𝛌_𝒎𝒊𝒏) = 𝑹𝑬𝑭_𝑷𝑶𝑺𝟏 − 𝑹𝑬𝑭_𝑷𝑶𝑺𝟐 [%]
𝑹𝑬𝑭_𝑷𝑶𝑺𝟏 = Reference position for actuator 1 for gas

𝑭_𝑮𝒂𝒔 = 𝟖 ∗ 𝑹𝑬𝑭_𝑷𝑶𝑺𝟏 [m³/h] (Example of gas flow characteristic)
𝑹𝑬𝑭_𝑷𝑶𝑺𝟐 = Reference position for actuator 2 for air supply

𝑭_Air = 100 ∗ 𝑹𝑬𝑭_𝑷𝑶𝑺𝟐 [m³/h] (Example of combustion air flow characteristic)
𝑭_Air = 𝛌 ∗ 𝑭_𝑮𝒂𝒔 ∗ 𝑳𝒎𝒊𝒏 [m³/h] under normal conditions

𝛌 = excess air ratio [-]
𝑳𝒎𝒊𝒏 = stoichiometric air requirement [m³ air/m³ gas]
𝑭_Air 𝒎𝒊𝒏 = 𝛌𝒎𝒊𝒏 ∗ 𝑭_𝑮𝒂𝒔 ∗ 𝑳𝒎𝒊𝒏 [m³/h] under normal conditions

𝛌𝒎𝒊𝒏 = min. excess air ratio [-]
𝑭𝑳𝒖𝒇𝒕 𝒎𝒊𝒏 𝟖 ∗ 𝑹𝑬𝑭_𝑷𝑶𝑺𝟏

𝑹𝑬𝑭_𝑷𝑶𝑺𝟐 = = 𝝀 𝒎𝒊𝒏 ∗ ∗ 𝑳𝒎𝒊𝒏 =
𝟏𝟎𝟎 𝟏𝟎𝟎
𝟐
= 𝑹𝑬𝑭_𝑷𝑶𝑺𝟏 ∗ ∗ 𝝀 𝒎𝒊𝒏 ∗ 𝑳𝒎𝒊𝒏 [%]
𝟐𝟓
𝑴𝑨𝑿𝑫𝑰𝑭 𝒇(𝑹𝑬𝑭_𝑷𝑶𝑺𝟏,𝛌𝒎𝒊𝒏) = 𝑹𝑬𝑭_𝑷𝑶𝑺𝟏 − 𝑹𝑬𝑭_𝑷𝑶𝑺𝟐 =

𝟐
= 𝑹𝑬𝑭_𝑷𝑶𝑺𝟏 ∗ ( 𝟏 − ∗ 𝝀 𝒎𝒊𝒏 ∗ 𝑳𝒎𝒊𝒏 ) [%]
𝟐𝟓
For MAXDIF = 100 %, this Monitoring is disabled.
The linearity errors are the determining factor of the MAXDIF error consideration.
Therefore, if failsafe flow measurements are available, instead of MAXDIF the
separate λ – Monitoring is to be preferred. The excess air λ can be calculated from
the ratio of the actual air supply 𝑭_Air to the stoichiometric air requirement 𝑳𝒎𝒊𝒏 for
the fuel 𝑭_𝑮𝒂𝒔.

Entry-ID: 109751614, V2.2, 12/2018 73
3.7 Function for gas tightness test (F_TIGHTN)

3.7.1 Introduction
The F_TIGHTN function controls the valve proving system for automatic shut-off
valves (VPS, EN 1643 requirement) for the safety shut-off valves of the supply
pipes which supply gaseous fuel. The automatic shut-off valves shall be proved
closed at each start-up. In case where the valve is not proved closed, the current
start-up shall be stopped and the system shall go to lock-out.
Figure 3-22
CIC_F_TIGHTN
The picture above shows the chart-in-chart view of F_TIGHTN as it is available in
• PMAX_ERROR with PMAX_ERROR_IN
• PMIN_ERROR with PMIN_ERROR_IN
• PRESSURE_ERROR with PRESSURE_ERROR_IN
• TIGH_OK with TIGH_OK_IN
• TEST_1_OK with TEST1_OK_IN
• F_AND4 (FB301)
• F_OR4 (FB 302)
• F_NOT (FB304)
• F_SR_FF (FB 308)
• F_RS_FF (FB307)
• F_TON (FB 343)

Entry-ID: 109751614, V2.2, 12/2018 74
3.7.2 Connections
Table 3-21
type
Inputs
TIGHTN_ON F-BOOL Start command for gas tightness test
A positive edge at this input starts the gas tightness test.
After a successful test, the stored "1" signal is reset at output
TIGH_OK by means of a positive edge at TIGHTN_ON.
The gas tightness test cannot be started while operating a
burner (GAS_RUN=1).
PMIN_OK F-BOOL Pressure monitoring tightness test of SAV 2
• For a 1-signal at this input the measured pressure lies
above the configured threshold value.
• For a 0-signal at this input, the configured value at the
pressure detector is fallen short of or an error exists at the
pressure switch.
PMAX_OK F-BOOL Pressure monitoring tightness test of SAV 1
• For a 1-signal at this input the measured pressure lies

below the configured threshold value.
• For a 0-signal at this input, the configured value at the
pressure detector is exceeded or an error exists at the
pressure switch.
A 1-signal must be active at PMAX_OK, so the function can be
started via TIGHTN_ON.
GAS_RUN F-BOOL Gas startup program active
If a 1-signal is pending at this input, the block cannot be started.
With this input it is polled, whether the burner is just starting and
the valves must not be tested.
GAS_OPAT F-BOOL Gas burner in operation
As soon as the gas burner is in operation, the output parameter
"Gas tightness test successful" (TIGH_OK=1) is set to zero.
If the gas burner is running, the 1-signal at GAS_OPAT prevents
the gas tightness test from being switched on.
If GAS_OPAT becomes TRUE during the test, the gas tightness
test is interrupted.
The acknowledgement is only given at positive edge
T_TEST_PMAX F-TIME Test time for verifying the tightness of the first safety shut-
off valve
Within the given period of time, the tightness of SAV 1 is
checked.
• Guide value: 0min < T_TEST_PMAX < 2min
T_TEST_PMIN F-TIME Test time for verifying the tightness of the second safety
shut-off valve and the venting valve
Within the given period of time, the tightness of SAV 2 and the
venting valve is checked.
• Guide value: 0min < T_TEST_PMIN < 2min

Entry-ID: 109751614, V2.2, 12/2018 75

type
T_FAIL_P F-TIME Failure time
A 1-signal must no be active simultaneously at PMIN_OK and
PMAX_OK for longer than T_FAIL_P, otherwise an error is
pending.
T_FILL F-TIME Filling time
T_FILL specifies the value of how long SAV 1 remains open for
filling the space between the safety shut-off valves and the
venting valve.
• Guide value: 0s < T_FILL < 3s
Test1_OK_IN F-BOOL TEST1_OK must be wired to this feedback input
TIGH_OK_IN F-BOOL TIGH_OK must be wired to this feedback input
PMAX_ERROR_IN F-BOOL PMAX_ERROR must be wired to this feedback input
PMIN_ERROR_IN F-BOOL PMIN_ERROR must be wired to this feedback input
PRESSURE_ERROR_IN F-BOOL PRESSURE_ERROR must be wired to this feedback input
Outputs
CLOSE_VENT_V F-BOOL Controlling the venting valve
If a 1-signal is pending at the output, the venting valve is closed
(opened without electrical power).
OPEN_FILL_V F-BOOL Controlling the first SAV

If a 1-signal is pending at the output, the first safety shut-off
valve is opened.
PMAX_ERROR F-BOOL SAV 1 leaking
Error message for leaking safety shut-off valve
This message is reset via the QUIT input.
PMIN_ERROR F-BOOL SAV 2 or venting valve leaking
Error message for leaking second safety shut-off valve or
leaking venting valve
PRESSURE_ERROR F-BOOL PMIN_OK/ PMAX_OK error
A 1-signal must no be active simultaneously at PMIN_OK and
PMAX_OK for longer than T_FAIL_P, otherwise an error is
pending.
TIGH_OK F-BOOL Tightness test successful
Signals that the gas tightness test was performed successfully.
Reset by input GAS_OPAT or a positive edge at TIGHTN_ON.
TEST1_OK F-BOOL Feedback output

Entry-ID: 109751614, V2.2, 12/2018 76
Function principle of the gas tightness test

Pressure sensors P1 and P2 displayed in the pictures monitor the pressure in the
various test phases.
Note The venting valve is opened without electrical power
1. Prior to the gas tightness test, both safety shut-off valves (SAV 1 and SAV2)
are closed and the venting valve is opened. The pressure in the space
between the valves is equal to atmospheric pressure.
2. When starting test phase 1, the venting valve is closed. During the testing time,
both safety shut-off valves and the venting remain closed. If the pressure rises
due to the possibly leaking first safety shut-off valve, this is reported by
pressure switch P1.
Figure 3-23 Test phase 1 of the tightness test
venting
SAV 1 SAV 2
3. If the first safety shut-off valve (SAV 1) is tight, it is opened for a certain
duration of time and the venting valve is closed. The gas pressure now exists
between the three valves. Using P2 it is now checked whether the space
between the valves decompresses. If the pressure reduces, either the safety
shut-off valve or the venting valve is leaking.
Figure 3-24 Test phase 2 of the tightness test
venting
SAV 1 SAV 2

Entry-ID: 109751614, V2.2, 12/2018 77
Function principle F_TIGHTN

The gas tightness test is started by a positive edge at start input TIGHTN_ON. For
the duration of the gas tightness test, F_TIGHTN takes on the control of the first
safety shut-off valve and the venting valve. After successfully completing the gas
tightness test, the control of the safety shut-off valve is taken on by the F_GAS_BU
function. The picture below displays an example of the function for controlling all of
the valves.
Figure 3-25
#OPEN_V: F_GAS_BU
#OPEN_FILL_V: F_TIGHTN
#CLOSE_VENT_V: F_TIGHTN
Note If an implausible pressure change is detected during the test, or if error message
PRESSURE_ERROR is pending, the gas tightness test is interrupted and the
outputs for controlling the valves supply a 0-signal. The safety shut-off valves are
then closed, where as the venting valve is opened (opened without electrical
power). Error message PRESSURE_ERROR is pending if at both outputs
PMIN_OK and PMAX_OK a 1-signal is active at the same time and for longer
than T_FAIL_P. Acknowledgement is required for this message.

Entry-ID: 109751614, V2.2, 12/2018 78
3.7.4 Time diagrams
The picture below shows the signal behavior of function F_TIGHTN.

Figure 3-26
1) 2) 3) 4 5) 6) 7)
TIGHTN_ON Start leak test

PMIN_OK Signal Pressure Switch P2
PMAX_OK Signal Pressure Switch P1
GAS_RUN Operation state gasburner
GAS_OPAT Gasburner in operation
CLOSE_VENT_V Activation of ventilation valve
OPEN_FILL_V Activation of safety valve
PMAX_ERROR Valve 1 leaky
PMIN_ERROR Valve 2 leaky
PRESSURE_ERROR Failure PMIN / PMAX
TIGH_OK Gas leak test succesfull
T_TEST_PMAX
T_FILL
T_TEST_PMIN
Legend: Input = 1
Input irrelevant
Output = 1
Description of the optimal signal behavior:
1) Prior to the test, the gas pressure in the space between the valves equals
the air pressure
(PMAX_OK=1)
2) The gas tightness test is started by means of the pushbutton
(edge at TIGHTN_ON)
Venting valve is closed (CLOSE_VENT_V=1)
Timer T_TEST_PMAX starts
3) If no increase of the pressure is detected within T_TEST_PMAX,
(PMAX_OK remains 1), timer T_FILL is started
Safety shut-off valve 1 is opened (OPEN_FILL_V=1) and the fuel is filled
into the space between the valves
4) After T_FILL has expired, SAV 1 is closed (OPEN_FILL_V=0)
Timer T_TEST_PMIN starts
5) If within T_TEST_PMIN no decompression exists (PMIN_OK remains 1), a
message is output (TIGH_OK=1)
Gas tightness test completed
6) The 1-signal at TIGHT_OK is reset with a positive edge at input
TIGHTN_ON.
7) TIGH_OK can also be reset with GAS_OPAT.

Entry-ID: 109751614, V2.2, 12/2018 79
3.7.5 Status graph

Figure 3-27
12a
Ready to start
14
6
8 1
12b
Test mode 1
9
7
Error
2
5
11
13
Activation of
safety shut-off
vave
10 Plausbility
12c check of
3 pressure
control
Test mode 2 12d
12e
End

Entry-ID: 109751614, V2.2, 12/2018 80

Table 3-22
1 PMAX_OK == 1 AND
TIGHTN_ON == pos. edge AND
GAS_RUN == 0 AND
GAS_OPAT == 0
2 Safety time T_TEST_PMAX has expired
3 PMAX_OK == 0 AND
PMIN_OK == 1 AND
T_FILL expired
4 Safety time T_TEST_PMIN has expired
5 TIGHTN_ON == pos. edge OR GAS_OPAT == 1
6 TIGHTN_ON == pos. edge AND
(GAS_RUN == 1 OR GAS_OPAT == 1 OR PMAX_OK == 0)
7 PMAX_OK == 0
8 GAS_RUN == 1 OR GAS_OPAT == 1
11 PMIN_OK == 0
12 a-e PMAX_OK := TRUE OR PMIN_OK := TRUE
13 TIMER T_FAIL_P expired
14 QUIT == 1
Table 3-23
Ready for starting No outputs switched
CLOSE_VENT_V := TRUE
Test phase 1
Safety time T_TEST_PMAX running
Controlling the safety OPEN_FILL_V := TRUE
shut-off valve Filling time T_FILL running
OPEN_FILL_V := FALSE
Test phase 2
Safety time T_TEST_PMIN running
TIGH_OK := TRUE
End
CLOSE_VENT_V := FALSE
out of 7 PMAX_ERROR := TRUE

out of PMIN_ERROR := TRUE
Error 11
out of PRESSURE_ERROR := TRUE
13
Pressure switch plausibility Timer T_FAIL_P running
check

Entry-ID: 109751614, V2.2, 12/2018 81
4 Interaction of the Blocks

4.1 Overview
This chapter introduces an interconnection example for an oil and gas burner
application respectively. The type of interconnection depends on the requirements
of the application and cannot be assigned universally. If your application requires
other parameters and/or another interconnection, it must be adjusted according to
your judgement.
The aim of this interconnection example is only the illustration of signal flows
between the individual blocks and their interaction.
The individual interconnections are numbered and are explained in a subsequent
table for oil and gas burner controllers.
Using the interconnection example contained in this chapter is no

guarantee for meeting the legal requirements, nor can applications
generally be controlled with it.
The examples given in this chapter shall only illustrate how the individual
functions interact.

Entry-ID: 109751614, V2.2, 12/2018 82
4.2 Interconnection example F_GAS_BU

Figure 4-1 Interconnection example of a gas burner control
FB 466 FB 469
F_TIGHTN F_AIRD
TIGHTN_ON CLOSE_AD
PMIN_OK AD_IGNPOS CLOSE_1
PMAX_OK OPEN_AD CLOSE_2
FB473
1 GAS_RUN CLOSE_VENT_V AD_CLOSED OPEN_1 F_POS_CH
REF_POS1
2 GAS_OPAT OPEN_FILL_V AD_MAX OPEN_2
REF_POS2
QUIT PMAX_ AD_MIN CLOSING_ &
0
ERROR ERROR
0
0
MAXDIF
T_TEST_PMAX PMIN_ AD_OPENED OPENING_
ERROR ERROR
TOL_1
T_TEST_PMIN PRESSURE_ QUIT POS_ERROR
ERROR
TOL2
T_FILL TIGH_OK T1_CLOSE QUIT_ON
SAFE_POS1
T_FAIL_P QUIT_ON T2_OPEN AD_IGNPOS_OK
SAFE_POS2 REF_ERROR
0 >=1
0 0
POS1 POS1_ERROR
0
0 &
0 0 FB 467 FB 465 POS2 POS2_ERROR
0 F_GAS_BU F_IGNTR
6 PRE_INTL 3 IGN_ON
QUIT QUIT_ON
T1_REF_CH
0 &
8 ST_INTL TEST_ON
NO_POS1
0 0
0
7 OP_INTL TEST_OFF
T2_REF_CH NO_POS2
GAS_BU_ON T1_TOL SETP_POS1

QUIT
GAS_BU_OFF T2_TOL SETP_POS2

MAIN_INTL
GAS_OK OP_INTL IGN_READY
GASFIRE IGN_OP IGN_TEST
V_IGNPOS
4 PRG_RUN IGN_ENGD
AIRFL_OK RUN_TFAIL OPEN_V
9 AD_IGNPOS GAS_RUN
5 BU_OP TRANSF
10 IGN_OP IGN_ON IGN_OPAT
BU_OP OPEN_V T1_IGN ERROR
QUIT GAS_OPAT T2_TRANSF QUIT_ON
T_IGN ERROR_OP

Entry-ID: 109751614, V2.2, 12/2018 83
4.2.1 Explanations on interconnection example F_GAS_BU
Table 4-1 F_TIGHTN

No. Input signal Signal source
GAS_RUN F_GAS_BU.GAS_RUN
1 Is GAS_RUN active, a start the gas tightness test will be prevented or a running gas
tightness test is aborted.
GAS_OPAT F_GAS_BU.GAS_OPAT
2
GAS_OPAT resets the TIGH_OK output
Table 4-2 F_IGNTR

3 IGN_ON F_GAS_BU.IGN_ON
Normal igniter operation is started with IGN_ON
PRG_RUN F_GAS_BU.GAS_RUN
4
To start the ignition test, no other programs must be in operation (PRG_RUN=0)
BU_OP F_GAS_BU.GAS_OPAT
5
GAS_OPAT on BU_OP resets the test function of the igniter
Table 4-3 F_GAS_BU

6 PRE_INTL F_TIGHTN.TIGH_OK AND F_IGNTR.IGN_READY
Without IGN_READY=1 and TIGH_OK=1, GAS_BU cannot start
This interconnection signals to the burner function that the ignition function is ready and the
ignition function can be started.
(F_POS_CH.REF_ERROR NOR
F_POS_CH.POS1_ERROR NOR
OP_INTL F_POS_CH.POS2_ERROR)
AND
7
(F_AIRD.CLOSING_ERROR NOR
F_AIRD:OPENING_ERROR)
The interconnection with GAS_BU is only necessary if the running gas burner shall be
switched off at pending position errors.
ST_INTL NOT F_IGNTR.ERROR
8 With a pending ERROR, GAS_BU cannot start; the ignition function signals an error via
ERROR. Should this error lead to switching off the main burner, the interconnection must be
set.
AD_IGNPOS F_AIRD.AD_IGNPOS_OK
9 When starting in single-burner operation, the air dampers must be in ignition position. This is
signaled by AD_IGN_POS_OK.
IGN_OP F_IGNTR.IGN_OPAT
10 Fuel valves in GAS_BU can only be opened if IGN_OP=1;
the ignition function signals via IGN_OPAT that the igniter has started successfully. This is
necessary to start the main burner

Entry-ID: 109751614, V2.2, 12/2018 84
4.3 Interconnection example F_OIL_BU

Figure 4-2 Interconnection example of a oil burner control
FB 469
F_AIRD
CLOSE_AD
FB 471 FB473
F_OIL_CLEAN AD_IGNPOS CLOSE_1
F_POS_CH
FB 468
OIL_CL_ON F_OIL_BU REF_POS1
OPEN_AD CLOSE_2
11 PRG_RUN
4 PRE_INTL
REF_POS2
AD_CLOSED OPEN_1
MAIN_INTL
6 ST_INTL
MAXDIF
AD_MAX OPEN_2
12 IGN_READY 5 OP_INTL
TOL_1
0 & AD_MIN CLOSING_ 0 >=1
0 0
ERROR 0
OIL_BU_ON
0 0
OIL_LANCE_OK TOL2
AD_OPENED OPENING_
ERROR
13 IGN_OP 7 OIL_BU_OFF
SAFE_POS1
QUIT POS_ERROR
V_IGNPOS
OV_CLOSED SAFE_POS2 REF_ERROR
T1_CLOSE QUIT_ON
OILFIRE 0 >=1
STV_OPENED POS1 POS1_ERROR 0 0
T2_OPEN AD_IGNPOS_OK
0
OIL_OK
AP_MIN_OK POS2 POS2_ERROR
STV_OPEN
14 AD_IGNPOS CL_RUN QUIT QUIT_ON
BV_CLOSED 0 >=1
BV_OPEN IGN_ON 0 T1_REF_CH NO_POS1
0
FB 465
15 OIL_CL_RES OIL_BU_OFF
9 AD_IGNPOS F_IGNTR
T2_REF_CH
AIRFL_OK
1 IGN_ON
NO_POS2
QUIT OPEN_BV T1_TOL SETP_POS1
10 IGN_OP OIL_RUN
TEST_ON
OIL_CL_OFF CLEAN_OK T2_TOL SETP_POS2

TEST_OFF
BU_OP OPEN_STV
T_BL_OUT ERROR
QUIT
T_MAX
8 CLEAN_OK IGN_ON
MAIN_INTL
QUIT OPEN_OV
OP_INTL IGN_READY
T_DRAIN OIL_OPAT
IGN_OP IGN_TEST
T_IGN FILL_REQ
T_FILL_IGN ERROR_OP
2 PRG_RUN IGN_ENGD
RUN_TFAIL OPEN_V
3 BU_OP TRANSF
IGN_OPAT
T1_IGN ERROR
T2_TRANSF QUIT_ON

Entry-ID: 109751614, V2.2, 12/2018 85
4.3.1 Explanation of interconnection example F_OIL_BU
Table 4-4 F_IGNTR

IGN_ON F_OIL_BU.IGN_ON OR F_OIL_CLEAN.IGN_ON
1
IGN_ON of OIL_BU or of OIL_CLEAN activates the igniter
PRG_RUN F_OIL_BU.OIL_RUN
2 This interconnection prevents starting the igniter, if any other program in operation.
(PRG_RUN=0)
BU_OP F_OIL_BU.OIL_OPAT
3
OIL_OPAT on BU_OP resets the test function of the igniter
Table 4-5 F_OIL_BU

No. Input signals Signal source
4 PRE_INTL F_IGNTR.IGN_READY
Without IGN_READY=1 OIL_BU cannot start.
This interconnection signals to the burner function that the ignition function is ready and the
ignition function can be started.
(F_POS_CH.REF_ERROR NOR
F_POS_CH.POS1_ERROR NOR
F_POS_CH.POS2_ERROR)
OP_INTL
AND
5
(F_AIRD.CLOSING_ERROR NOR
F_AIRD.OPENING_ERROR)
The interconnection with OIL_BU is only necessary if the running oil burner shall be switched
off at pending position errors.
ST_INTL NOT F_IGNTR.ERROR
6 With a pending ERROR, OIL_BU cannot start; the ignition function signals an error via
ERROR. Should this error lead to switching off the main burner, the interconnection must be
set.
OIL_BU_OFF F_OIL_CLEAN.OIL_BU_OFF
7 OIL_BU_OFF causes a stop of the oil burner. This interconnection is necessary, since
otherwise, cleaning the oil lance would start in oil operation mode.
CLEAN_OK F_OIL_CLEAN.CLEAN_OK
If CLEAN_OK has been set, the burner was cleaned and time T_FILL_IGN is used as safety
8 time or filling time.
This interconnection is necessary, since otherwise, a startup process is cancelled after
cleaning, since the safety time is too short.
9 When starting in single-burner operation, the air dampers must be in ignition position. This is
signaled by AD_IGN_POS_OK.
10 Fuel valves in OIL_BU can only be opened if IGN_OP=1;
the ignition function signals via IGN_OPAT that the igniter has started successfully. This is
necessary to start the main burner.

Entry-ID: 109751614, V2.2, 12/2018 86
Table 4-6 F_OIL_CLEAN

No. Input signals Signal source
PRG_RUN F_OIL_BU.OIL_RUN
11 OIL_RUN on PRG_RUN causes the cleaning process to be started only if the oil burner is
out of service.
IGN_READY F_IGNTR.IGN_READY
12 Due to this interconnection, the signal to the cleaning function states that the ignition function
is ready and can be started.
13 The ignition function signals via IGN_OPAT, that the igniter was started successfully. This
condition is necessary so the cleaning function can be started.
14
AD_IGN_POS_OK must have been set in order to start cleaning function.
OIL_CL_RES F_OIL_BU.OIL_OPAT
15
OIL_OPAT on OIL_CL_RES switches the cleaning program off.

Entry-ID: 109751614, V2.2, 12/2018 87
5 Migration
5 Migration
In the course of transforming the “Failsafe Function Blocks for Burner Technology”
(Former order no. 9AL3100-1AA13) into the application example, some connection
designations were changed for a clearer understanding.
The functionality has not changed. The version V1.0 of this application example
correlates to version V1.3 of “Failsafe Function Blocks for Burner Technology” for
S7 F Systems.
Subsequently, there is a list of the changed connection designations.
F_ARID
Table 5-1
Previous designation New designation
Inputs
AD_OPEN AD_OPENED
Outputs
FAIL_ADC CLOSING_ERROR
FAIL_ADO OPENING_ERROR
FAIL_POS POS_ERROR
F_GAS_BU
Table 5-2
Inputs
SW_INTL PRE_INTL
PROTEC OP_INTL
STA_GBU GAS_BU_ON
STO_GBU GAS_BU_OFF
Outputs
PROTEC_F ERROR_OP
R1_OUT IGN_START
R2_OUT T_RUN_UP

Entry-ID: 109751614, V2.2, 12/2018 88
5 Migration
F_IGNTR
Table 5-3
Inputs
IGNT_ON TEST_ON
IGNT_OFF TEST_OFF
INT_FLUF MAIL_INTL
SW_COND OP_INTL
T1_SAVET T1_IGN
Outputs
ING_READ IGN_READY
DISRUP ERROR
F_OIL_BU
Table 5-4
Inputs
SW_INTL PRE_INTL
ST_INTRL ST_INTL
PROTEC OP_INTL
STA_OBU OIL_BU_ON
STO_OBU OIL_BU_OFF
CSTV_CLOS BV_CLOSED
E_CLEAN CLEAN_OK
T2_ZSI T_IGN
T3_LSI T_FILL_IGN
T1_VDZ T_DRAIN
Outputs
PROTEC_F ERROR_OP
GCLEAN FILL_REQ
R2_OUT R_RUNNING
R2_OUT T_RUN_UP
R4_OUT IGN_START

Entry-ID: 109751614, V2.2, 12/2018 89
5 Migration
F_OIL_CLEAN
This function was previously called F_OIL_ST
Table 5-5
Inputs
OILP_ON OIL_CL_ON
PROTEC MAIN_INTL
SW_COND TGN_READY
OL_ON OIL_LANCE_OK
OV_CLOS OC_CLOSED
AV_OPEN STV_OPENED
AP_MIN AP_MIN_OK
AD_IGPOS AD_INGPAS
OILP_RS OIL_CL_RES
OILP_OFF OIL_CL_OFF
BL_TIME T_BL_OUT
T_DISRUP T_MAX
Outputs
STPR_ON CL_RUN
OILBU_OF OIL_BU_OFF
BV_OFF OPEN_BV
DISRUP ERROR
V_RS RES_OIL_CL
END CLEAN_OK

Entry-ID: 109751614, V2.2, 12/2018 90
5 Migration
F_POS_CH
Table 5-6
Inputs
SAF_POS1 SAFE_POS1
SAF_POS2 SAFE_POS2
POS1_M POS1
POS2_M POS2
T1_RCH T1_REF_CH
T2_RCH T2_REF_CH
T1_NPO T1_TOL
T2_NPO T2_TOL
Outputs
FAIL_REF REF_ERROR
FAIL_1 POS1_ERROR
FAIL_2 POS2_ERROR
POS1_OUT SETP_POS1
POS2_OUT SETP_POS2
TR_1 T1_REF_EXP
TR_2 T2_REF_EXP
F_TIGHTN
Table 5-7
Inputs
ST_TT TIGHTN_ON
PMIN PMIN_OK
PMAX PMAX_OK
T1_PS T_TEST_PMAX
T2_PS T_TEST_PMIN
T_FUEL T_FILL
Outputs
E_VENT CLOSE_VENT_V
E_FILL OPEN_FILL_V
V1_N_T PMAX_ERROR
V2_N_T PMIN_ERROR
FAIL_P PRESSURE_ERROR

Entry-ID: 109751614, V2.2, 12/2018 91
6 Appendix
6 Appendix
6.1 Specific Abbreviations in CFC Code
In CFC code the following abbreviations are used; a respective explanation is given
in the F_AIRD function on subchart A sheet 1.
Table 6-1
INV Inverter
ENG/E Switch on interlock
CONDn/Cn Switch-on condition number n
SR SR flip-flop
PARAMSV Parameter supervision
RES/R Reset
SET/S Set
LIM Limiter
ADD Adder
SUB Subtracter
POS/P Detecting a positive edge
NEG/N Detecting a negative edge

MUX Multiplexer

Entry-ID: 109751614, V2.2, 12/2018 92
6 Appendix
6.2 Service and Support

Industry Online Support
Do you have any questions or need assistance?
Siemens Industry Online Support offers round the clock access to our entire
service and support know-how and portfolio.
The Industry Online Support is the central address for information about our
products, solutions and services.
Product information, manuals, downloads, FAQs, application examples and videos
– all information is accessible with just a few mouse clicks at:
https://support.industry.siemens.com
Technical Support
The Technical Support of Siemens Industry provides you fast and competent
support regarding all technical queries with numerous tailor-made offers
– ranging from basic support to individual support contracts. You send queries to
Technical Support via Web form:
www.siemens.com/industry/supportrequest
Service offer
Our range of services includes, inter alia, the following:
• Product trainings
• Plant data services

• Spare parts services
• Repair services
• On-site and maintenance services
• Retrofitting and modernization services
• Service programs and contracts
You can find detailed information on our range of services in the service catalog:
https://support.industry.siemens.com/cs/sc
Industry Online Support app

You will receive optimum support wherever you are with the "Siemens Industry
Online Support" app. The app is available for Apple iOS, Android and Windows
Phone:
https://support.industry.siemens.com/cs/ww/en/sc/2067

Entry-ID: 109751614, V2.2, 12/2018 93
6 Appendix
6.3 Links and Literature

Table 6-2
No. Topic
\1\ Siemens Industry Online Support
https://support.industry.siemens.com
\3\ Link to this entry page of this application example
https://support.industry.siemens.com/cs/ww/en/view/109751614
6.4 Change documentation

Table 6-3
Version Date Modifications
V1.0 06/2013 First version
V1.0.1 08/2015 Correction of the description of PMIN_OK and PMAX_OK in
Table 3-21
V1.1 06/2017 F_POS_CH correction, otherwise after the position failure
on the 1-st position, it will follow the 2-nd position failure,
respectively vice versa. Additional description, MAXDIF
calculation example.
New note in 2.2 Standard Specification
V2.0 01/2018 Addition on the start-up logic of F_GAS_BU
Additional output ERROR_IGN flame failure on start-up for

F_GAS_BU
Addition of Flame Monitoring for F_GAS_BU, F_OIL_BU
and F_IGNTR
Publication via new Entry ID
V2.1 01/2018 Correction in Figure 1-1
V2.2 12/2018 Correction in F_GAS_BU
Change of names and optimization of run sequence
Further information in the Chart in Chart

Entry-ID: 109751614, V2.2, 12/2018 94

Burner F Systems DOC V2 2 en

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Burner F Systems DOC V2 2 en

Uploaded by

Copyright:

Available Formats

Burner Technology for

Warranty and liability

deficiency or breach of a condition which goes to the root of the contract

Burner Technology for S7 F Systems (Burner Library)

3.2.2 Connections ....................................................................................... 22

Burner Technology for S7 F Systems (Burner Library)

3.7.3 Mode of operation .............................................................................. 77

Burner Technology for S7 F Systems (Burner Library)

1 Burner Technology and Burner Library

1.1 Library overview

Using the functions contained in this example is no guarantee for meeting

1.2 Technological layout

Burner Technology for S7 F Systems (Burner Library)

Figure 1-1 Technological layout

Table 1-1 Abbreviations used in the graphic

Burner Technology for S7 F Systems (Burner Library)

General structure of a combustion plant

Burner Technology for S7 F Systems (Burner Library)

Generic operation sequence of a burner

by the EN 746-2; otherwise, a failure shutdown must be initiated (immediate

Burner Technology for S7 F Systems (Burner Library)

2 System and Software Requirements

2.2 Standard Specification

Burner Technology for S7 F Systems (Burner Library)

2.3 System & Hardware

• SIMATIC S7 F Systems V6.2 or higher

Burner Technology for S7 F Systems (Burner Library)

3 Functions for Burner Technology

Using the functions contained in this example is no guarantee for meeting

Burner Technology for S7 F Systems (Burner Library)

3.1 Function for controlling the air dampers (F_AIRD)

Burner Technology for S7 F Systems (Burner Library)

All data type F-BOOL inputs have a default 0-signal.

If AD_IGNPOS has been set, commands to CLOSE_AD and

Burner Technology for S7 F Systems (Burner Library)

Name Data type Description

AD_IGNPOS=0, OPEN_AD=0 and CLOSE_AD=1.

Burner Technology for S7 F Systems (Burner Library)

Name Data type Description

3.1.3 Mode of operation

A response of input OPEN_AD or CLOSE_AD initiates opening or closing the air

detected via input AD_OPENED=1 or AD_CLOSED=1. The feedback must be

A pending error is reset with a positive edge at input QUIT.

Burner Technology for S7 F Systems (Burner Library)

3.1.4 Time diagrams

CLOSE_AD Close air damper

OPEN_2 Air damper opening command 2

Description of the signal behavior:

Burner Technology for S7 F Systems (Burner Library)

Signal behavior for the ignition position of the air dampers

CLOSE_AD Close air damper

OPEN_2 Air damper opening command 2

Burner Technology for S7 F Systems (Burner Library)

3.1.5 Status graph

Burner Technology for S7 F Systems (Burner Library)

Explanation of the status graph

16 CLOSE_AD == 1 AND AD_IGNPOS == 0

Burner Technology for S7 F Systems (Burner Library)

out of 28 a-e POS_ERROR := TRUE

Burner Technology for S7 F Systems (Burner Library)

3.2 Function for controlling the functions of a bas burner

Burner Technology for S7 F Systems (Burner Library)

Burner Technology for S7 F Systems (Burner Library)